From 6368272cdeec8c69800b4e7645402914f48e5c33 Mon Sep 17 00:00:00 2001 From: seth Date: Tue, 9 Jul 2024 06:45:24 -0400 Subject: modules: better document most things --- modules/nixos/server/default.nix | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'modules/nixos/server/default.nix') diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix index 567f46b..2ff257a 100644 --- a/modules/nixos/server/default.nix +++ b/modules/nixos/server/default.nix @@ -19,20 +19,25 @@ in ]; config = lib.mkIf cfg.enable { + # all servers are most likely on stable, so we may want to pull some newer packages from time to time _module.args.unstable = inputs.nixpkgs.legacyPackages.${pkgs.stdenv.hostPlatform.system}; boot.tmp.cleanOnBoot = lib.mkDefault true; + # we don't need it here documentation.enable = false; environment.defaultPackages = lib.mkForce [ ]; nix = { gc = { + # ~every 2 days dates = "Mon,Wed,Fri *-*-* 00:00:00"; options = "-d --delete-older-than 2d"; }; + # hardening access to `nix` on servers as no other users + # *should* ever really touch it settings.allowed-users = [ config.networking.hostName ]; }; }; -- cgit v1.2.3