organize

modules/zfs.nix

@@ -0,0 +1,92 @@
+{
+  config,
+  service_configs,
+  pkgs,
+  ...
+}:
+let
+  # DO NOT CHANGE
+  # path is set via a zfs property
+  zfs-key = "/etc/zfs-key";
+in
+{
+  system.activationScripts = {
+    # Copy decrypted ZFS key from agenix to expected location
+    # /etc is on tmpfs due to impermanence, so no persistent storage risk
+    "zfs-key".text = ''
+      #!/bin/sh
+      rm -f ${zfs-key} || true
+      cp ${config.age.secrets.zfs-key.path} ${zfs-key}
+      chmod 0400 ${zfs-key}
+      chown root:root ${zfs-key}
+    '';
+  };
+
+  boot.zfs.package = pkgs.zfs;
+  boot.initrd.kernelModules = [ "zfs" ];
+
+  boot.kernelParams =
+    let
+      gb = 20;
+      mb = gb * 1000;
+      kb = mb * 1000;
+      b = kb * 1000;
+    in
+    [
+      "zfs.zfs_arc_max=${builtins.toString b}"
+    ];
+
+  boot.supportedFilesystems = [ "zfs" ];
+  boot.zfs.extraPools = [
+    service_configs.zpool_ssds
+    service_configs.zpool_hdds
+  ];
+
+  services.sanoid = {
+    enable = true;
+    datasets."${service_configs.zpool_ssds}" = {
+      recursive = true;
+      autoprune = true;
+      autosnap = true;
+      hourly = 5;
+      daily = 7;
+      monthly = 3;
+      yearly = 0;
+    };
+
+    datasets."${service_configs.zpool_ssds}/services/sql" = {
+      recursive = true;
+      autoprune = true;
+      autosnap = true;
+      hourly = 12;
+      daily = 2;
+      monthly = 0;
+      yearly = 0;
+    };
+
+    datasets."${service_configs.zpool_ssds}/services/jellyfin_cache" = {
+      recursive = true;
+      autoprune = true;
+      autosnap = true;
+      hourly = 0;
+      daily = 0;
+      monthly = 0;
+      yearly = 0;
+    };
+
+    datasets."${service_configs.zpool_hdds}" = {
+      recursive = true;
+      autoprune = true;
+      autosnap = true;
+      hourly = 0;
+      daily = 0;
+      monthly = 0;
+      yearly = 0;
+    };
+  };
+
+  services.zfs = {
+    autoScrub.enable = true;
+    trim.enable = true;
+  };
+}