ultima/modules/nixos/hardware/impermanence/default.nix

{ x, inputs, lib, config, ... }:

with lib;
with x;
let cfg = config.module.hardware.impermanence;
in {
  options = { module.hardware.impermanence = { enable = mkBool; }; };

  imports = [ inputs.impermanence.nixosModules.impermanence ];
  config = mkIf cfg.enable {
    programs.fuse.userAllowOther = true;
    environment.persistence."/persistent" = {
      enable = true; # NB: Defaults to true, not needed
      hideMounts = true;
      directories = [
        "/var/log"
        "/var/lib/bluetooth"
        "/var/lib/nixos"
        "/var/lib/systemd/coredump"
        "/etc/NetworkManager/system-connections"
        {
          directory = "/var/lib/colord";
          user = "colord";
          group = "colord";
          mode = "u=rwx,g=rx,o=";
        }
      ];
      files = [
        "/etc/machine-id"
        {
          file = "/var/keys/secret_file";
          parentDirectory = { mode = "u=rwx,g=,o="; };
        }
      ];
      users.talyz = {
        directories = [
          "Downloads"
          "Music"
          "Pictures"
          "Documents"
          "Videos"
          "VirtualBox VMs"
          {
            directory = ".gnupg";
            mode = "0700";
          }
          {
            directory = ".ssh";
            mode = "0700";
          }
          {
            directory = ".nixops";
            mode = "0700";
          }
          {
            directory = ".local/share/keyrings";
            mode = "0700";
          }
          ".local/share/direnv"
        ];
        files = [ ".screenrc" ];
      };
    };
  };
}