Re-deploy sisko with impermanence

hosts/sisko/default.nix

@@ -13,7 +13,7 @@
       "wireguard-server"
       "mediatomb"
       "transmission"
-      "hercules-ci"
+      # "hercules-ci"
       "home-assistant"
       "adguard-home"
       "cloudflare-dyndns"
@@ -21,13 +21,13 @@
       "invidious"
       "searx"
       "rock5b-samba"
-      "paperless"
-      "restic"
-      "syncthing"
-      "minio"
-      # "matrix"
+      # "paperless"
+      # "restic"
+      # "syncthing"
+      # "minio"
+      # # "matrix"
       "forgejo"
-      # "jellyfin"
+      # # "jellyfin"
       # "immich"
     ]
     ++ [
@@ -62,8 +62,6 @@
 
   ccr.enable = true;
 
-  # services.rock5b-fan-control.enable = true;
-
   nixpkgs.hostPlatform = "aarch64-linux";
 
   swapDevices = [];
@@ -84,26 +82,35 @@
     "console=ttyS0,1500000"
   ];
 
-  # fileSystems."/mnt/film" = {
-  #   device = "//ccr.ydns.eu/film";
-  #   fsType = "cifs";
-  #   options = let
-  #     credentials = pkgs.writeText "credentials" ''
-  #       username=guest
-  #       password=
-  #     '';
-  #   in ["credentials=${credentials},x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s"];
-  # };
-  # fileSystems."/mnt/archivio" = {
-  #   device = "//ccr.ydns.eu/archivio";
-  #   fsType = "cifs";
-  #   options = let
-  #     credentials = pkgs.writeText "credentials" ''
-  #       username=guest
-  #       password=
-  #     '';
-  #   in ["credentials=${credentials},x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s"];
-  # };
+  environment.persistence."/persist" = {
+    hideMounts = true;
+    directories = [
+      "/etc/NetworkManager/system-connections"
+      "/var/db/dhcpcd/"
+      "/var/lib/NetworkManager/"
+      "/var/lib/nixos"
+      "/var/lib/systemd"
+      "/var/lib/systemd/coredump"
+      "/var/log"
+      "/var/lib/containers"
+      "/var/lib/postgresql"
+    ];
+    files = [
+      "/etc/machine-id"
+      "/etc/ssh/ssh_host_ed25519_key"
+      "/etc/ssh/ssh_host_ed25519_key.pub"
+      "/etc/ssh/ssh_host_rsa_key"
+      "/etc/ssh/ssh_host_rsa_key.pub"
+    ];
+  };
+
+  age.identityPaths = [
+    "/persist/etc/ssh/ssh_host_ed25519_key"
+    "/persist/etc/ssh/ssh_host_rsa_key"
+  ];
+
+  fileSystems."/persist".neededForBoot = true;
+  boot.tmp.cleanOnBoot = true;
 
   fileSystems."/mnt/hd" = {
     device = "/dev/disk/by-id/ata-WDC_WD10EADS-22M2B0_WD-WCAV52709550-part1";

hosts/sisko/disko.nix

@@ -7,6 +7,10 @@ let
   # old_hd = "/dev/disk/by-id/ata-WDC_WD5000AAKX-08U6AA0_WD-WCC2E5TR40FU";
 in {
   disko.devices = {
+    nodev."/" = {
+      fsType = "tmpfs";
+      mountOptions = ["size=1024M" "defaults" "mode=755"];
+    };
     disk = {
       ssd = {
         device = ssd;
@@ -17,20 +21,35 @@ in {
             ESP = {
               label = "ESP";
               type = "EF00";
-              size = "1G";
+              size = "1024M";
               content = {
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
               };
             };
-            root = {
-              label = "root";
-              size = "100%";
+            nixroot = {
+              size = "100G";
               content = {
                 type = "filesystem";
                 format = "ext4";
-                mountpoint = "/";
+                mountpoint = "/nix";
+              };
+            };
+            persist = {
+              size = "100G";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/persist";
+              };
+            };
+            tmp = {
+              end = "0";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/tmp";
               };
             };
           };