made impermanence config work slightly better

2024-12-25 18:21:10 -06:00 · 2024-12-25 18:21:10 -06:00 · 48dc0b1150
commit 48dc0b1150
parent 2d5e37b1eb
8 changed files with 66 additions and 25 deletions
--- a/modules/nixos-modules/ssh.nix
+++ b/modules/nixos-modules/ssh.nix
@ -1,13 +1,28 @@
-{...}: {
-  services = {
-    openssh = {
-      enable = true;
-      ports = [22];
-      settings = {
-        PasswordAuthentication = false;
-        UseDns = true;
-        X11Forwarding = false;
+{
+  lib,
+  config,
+  ...
+}: {
+  config = lib.mkMerge [
+    {
+      services = {
+        openssh = {
+          enable = true;
+          ports = [22];
+          settings = {
+            PasswordAuthentication = false;
+            UseDns = true;
+            X11Forwarding = false;
+          };
+        };
      };
-    };
-  };
+    }
+    (lib.mkIf config.host.impermanence.enable {
+      environment.persistence."/persist/system/root" = {
+        directories = [
+          "/etc/ssh"
+        ];
+      };
+    })
+  ];
 }