treewide: impermanence configuration

2025-08-18 20:19:55 +01:00
parent 2a005aade6
commit 65af220200
32 changed files with 446 additions and 54 deletions
--- a/hosts/server.nix
+++ b/hosts/server.nix
@@ -65,6 +65,13 @@ in
    ];
  };

+  environment.persistence."/state".directories = [
+    {
+      directory = "/var/lib/fail2ban";
+      mode = "0750";
+    }
+  ];
+
  services.openssh.settings.PermitRootLogin = mkForce "prohibit-password";

  modules.services.tailscale = {