From 18c738cc2f0d59c104ca4b73a8df4db5d56df65e Mon Sep 17 00:00:00 2001
From: Leyla Becker <git@jan-leila.com>
Date: Sun, 8 Feb 2026 12:37:42 -0600
Subject: [PATCH] feat: disabled impermanence for all the needed services

---
 .../nixos/defiant/configuration.nix           | 29 +++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/configurations/nixos/defiant/configuration.nix b/configurations/nixos/defiant/configuration.nix
index 9aa2e34..52eb452 100644
--- a/configurations/nixos/defiant/configuration.nix
+++ b/configurations/nixos/defiant/configuration.nix
@@ -226,6 +226,7 @@
     postgresql = {
       enable = true;
       adminUsers = ["leyla"];
+      impermanence.enable = false;
     };
 
     # temp enable desktop environment for setup
@@ -244,6 +245,7 @@
     reverseProxy = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
       acme = {
         enable = true;
         email = "jan-leila@protonmail.com";
@@ -253,6 +255,7 @@
     ollama = {
       enable = true;
       exposePort = true;
+      impermanence.enable = false;
 
       environmentVariables = {
         OLLAMA_KEEP_ALIVE = "24h";
@@ -287,6 +290,7 @@
       enable = true;
       authKeyFile = config.sops.secrets."vpn-keys/tailscale-authkey/defiant".path;
       useRoutingFeatures = "server";
+      impermanence.enable = false;
       extraUpFlags = [
         "--advertise-exit-node"
         "--advertise-routes=192.168.0.0/24"
@@ -299,24 +303,33 @@
       ];
     };
 
-    syncthing.enable = true;
+    syncthing = {
+      enable = true;
+      impermanence.enable = false;
+    };
 
-    fail2ban.enable = true;
+    fail2ban = {
+      enable = true;
+      impermanence.enable = false;
+    };
 
     jellyfin = {
       enable = true;
       domain = "media.jan-leila.com";
       extraDomains = ["jellyfin.jan-leila.com"];
+      impermanence.enable = false;
     };
 
     immich = {
       enable = true;
       domain = "photos.jan-leila.com";
+      impermanence.enable = false;
     };
 
     forgejo = {
       enable = true;
       reverseProxy.domain = "git.jan-leila.com";
+      impermanence.enable = false;
     };
 
     searx = {
@@ -327,6 +340,7 @@
     actual = {
       enable = true;
       domain = "budget.jan-leila.com";
+      impermanence.enable = false;
     };
 
     home-assistant = {
@@ -334,6 +348,7 @@
       domain = "home.jan-leila.com";
       openFirewall = true;
       postgres.enable = true;
+      impermanence.enable = false;
 
       extensions = {
         sonos.enable = true;
@@ -346,11 +361,13 @@
       enable = true;
       domain = "documents.jan-leila.com";
       passwordFile = config.sops.secrets."services/paperless_password".path;
+      impermanence.enable = false;
     };
 
     panoramax = {
       enable = false;
       openFirewall = true;
+      impermanence.enable = false;
     };
 
     crab-hole = {
@@ -358,6 +375,7 @@
       port = 8085;
       openFirewall = true;
       show_doc = true;
+      impermanence.enable = false;
       downstreams = {
         host = {
           enable = true;
@@ -373,31 +391,38 @@
       mediaDir = "/srv/qbittorent";
       openFirewall = true;
       webuiPort = 8084;
+      impermanence.enable = false;
     };
 
     sonarr = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
     radarr = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
     bazarr = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
     lidarr = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
     jackett = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
     flaresolverr = {
       enable = true;
       openFirewall = true;
+      impermanence.enable = false;
     };
   };