impermanence

configuration.nix

@@ -13,6 +13,7 @@
   imports = [
     ./hardware.nix
     ./zfs.nix
+    ./impermanence.nix
 
     ./services/postgresql.nix
     ./services/jellyfin.nix
@@ -97,6 +98,7 @@
 
     initrd = {
       compressor = "zstd";
+      supportedFilesystems = [ "f2fs" ];
     };
 
     loader.systemd-boot.enable = lib.mkForce false;
@@ -284,7 +286,7 @@
     ];
 
     # TODO! use proper secrets management
-    # hashedPasswordFile = builtins.toString ./secrets/hashedPass;
+    hashedPassword = lib.strings.trim (builtins.readFile ./secrets/hashedPass);
 
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO4jL6gYOunUlUtPvGdML0cpbKSsPNqQ1jit4E7U1RyH" # laptop
@@ -339,7 +341,7 @@
   # };
 
   # systemd.tmpfiles.rules = [
-  #   "d /tank/music 775 ${username} users"
+  #   "Z /tank/music 775 ${username} users"
   # ];
 
   system.stateVersion = "24.11";