WIP: add note about 'iwd'

TODO:
* Do home-manager
* Look at for more inspiration github.com:nix-community/impermanence/pull/108
* Common files github.com:nix-community/impermanence/issues/10
* Useful config: github.com:chayleaf/dotfiles/blob/f77271b249e0c08368573c22a5c34f0737d3a766/system/modules/impermanence.nix

modules/nixos/services/aria/default.nix

@@ -71,7 +71,7 @@ in
 
     my.system.persist.directories = [
       cfg.downloadDir
-      "/var/lib/aria2"
+      config.users.users.aria2.home
     ];
 
     # NOTE: unfortunately aria2 does not log connection failures for fail2ban

modules/nixos/services/fail2ban/default.nix

@@ -35,7 +35,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/fail2ban"
+      "/var/lib/${config.systemd.services.fail2ban.serviceConfig.StateDirectory}"
     ];
   };
 }

modules/nixos/services/flood/default.nix

@@ -29,7 +29,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/flood"
+      "/var/lib/${config.systemd.services.flood.serviceConfig.StateDirectory}"
     ];
 
     # NOTE: unfortunately flood does not log connection failures for fail2ban

modules/nixos/services/indexers/default.nix

@@ -67,7 +67,7 @@ in
       };
 
       my.system.persist.directories = [
-        "/var/lib/prowlarr"
+        "/var/lib/${config.systemd.services.prowlarr.serviceConfig.StateDirectory}"
       ];
 
       services.fail2ban.jails = {

modules/nixos/services/jellyfin/default.nix

@@ -39,7 +39,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/jellyfin"
+      "/var/lib/${config.systemd.services.jellyfin.serviceConfig.StateDirectory}"
     ];
 
     services.fail2ban.jails = {

modules/nixos/services/lohr/default.nix

@@ -109,7 +109,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/lohr"
+      "/var/lib/${config.systemd.services.lohr.serviceConfig.StateDirectory}"
     ];
   };
 }

modules/nixos/services/mealie/default.nix

@@ -74,10 +74,14 @@ in
 
     my.services.backup = {
       paths = [
-        "/var/lib/mealie"
+        config.systemd.services.mealie.environment.DATA_DIR
       ];
     };
 
+    my.system.persist.directories = [
+      config.systemd.services.mealie.environment.DATA_DIR
+    ];
+
     services.fail2ban.jails = {
       mealie = ''
         enabled = true

modules/nixos/services/navidrome/default.nix

@@ -54,7 +54,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/navidrome"
+      "/var/lib/${config.systemd.services.navidrome.serviceConfig.StateDirectory}"
     ];
 
     services.fail2ban.jails = {

modules/nixos/services/nextcloud/default.nix

@@ -94,6 +94,7 @@ in
 
     my.system.persist.directories = [
       config.services.nextcloud.home
+      config.services.nextcloud.datadir
     ];
 
     services.fail2ban.jails = {

modules/nixos/services/nginx/default.nix

@@ -488,7 +488,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/acme"
+      config.users.user.acme.home
     ];
   };
 }

modules/nixos/services/paperless/default.nix

@@ -148,8 +148,8 @@ in
     };
 
     my.system.persist.directories = [
-      config.services.paperless.dataDir
+      config.services.paperless-ng.dataDir
-      config.services.paperless.mediaDir
+      config.services.paperless-ng.mediaDir
     ];
   };
 }

modules/nixos/services/pdf-edit/default.nix

@@ -55,7 +55,7 @@ in
     };
 
     my.system.persist.directories = [
-      "/var/lib/stirling-pdf"
+      "/var/lib/${config.systemd.services.stirling-pdf.serviceConfig.StateDirectory}"
     ];
 
     services.fail2ban.jails = {

modules/nixos/services/pyload/default.nix

@@ -55,7 +55,7 @@ in
 
     my.system.persist.directories = [
       cfg.downloadDirectory
-      "/var/lib/pyload"
+      "/var/lib/${config.systemd.services.pyload.StateDirectory}"
     ];
 
     services.fail2ban.jails = {

modules/nixos/services/servarr/default.nix

@@ -26,7 +26,7 @@ let
         dataDir =
           if service != "bazarr"
           then config.services.${service}.dataDir
-          else "/var/lib/bazarr";
+          else config.users.user.${service}.home;
       in
       [ dataDir ];
   };

modules/nixos/services/tandoor-recipes/default.nix

@@ -85,14 +85,17 @@ in
 
     my.services.backup = {
       paths = [
-        "/var/lib/tandoor-recipes"
+        "/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
+        config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
       ];
     };
 
     my.system.persist.directories = [
-      "/var/lib/tandoor-recipes"
+      "/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
+      config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
     ];
 
+
     # NOTE: unfortunately tandoor-recipes does not log connection failures for fail2ban
   };
 }

modules/nixos/services/transmission/default.nix

@@ -92,7 +92,6 @@ in
     };
 
     my.system.persist.directories = [
-      cfg.downloadBase
       config.services.transmission.home
     ];
 

modules/nixos/system/persist/default.nix

@@ -50,7 +50,7 @@ in
         "/etc/machine-id" # Machine-specific ID
         "/etc/adjtime" # Clock drift factor and offsets
       ]
-      ++ lib.unique cfg.files
+      ++ cfg.files
       ;
 
       directories = [
@@ -63,7 +63,7 @@ in
         "/var/spool" # FIXME: needed?
         "/var/tmp" # FIXME: needed?
       ]
-      ++ lib.unique cfg.directories
+      ++ cfg.directories
       ;
     };
   };