From 86ccf1964b5e30ead1b5f0d8ad376f9aa655d684 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 2 Nov 2022 00:15:19 +0100
Subject: tmpfs-root system-profile

---
 hosts/eostre/default.nix | 3 ---
 hosts/surtr/default.nix  | 7 +------
 hosts/vidhar/default.nix | 8 +-------
 3 files changed, 2 insertions(+), 16 deletions(-)

(limited to 'hosts')

diff --git a/hosts/eostre/default.nix b/hosts/eostre/default.nix
index 4aa6473e..e20929b4 100644
--- a/hosts/eostre/default.nix
+++ b/hosts/eostre/default.nix
@@ -67,9 +67,6 @@ with lib;
     zramSwap.enable = true;
 
     system.stateVersion = config.system.nixos.release; # No state
-    security.sudo.extraConfig = ''
-      Defaults lecture = never
-    '';
 
 
     time.timeZone = "Europe/Berlin";
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix
index e031c9b3..92d0088c 100644
--- a/hosts/surtr/default.nix
+++ b/hosts/surtr/default.nix
@@ -1,7 +1,7 @@
 { flake, pkgs, lib, ... }:
 {
   imports = with flake.nixosModules.systemProfiles; [
-    qemu-guest openssh rebuild-machines zfs
+    tmpfs-root qemu-guest openssh rebuild-machines zfs
     ./zfs.nix ./dns ./tls ./http ./bifrost ./matrix ./postgresql.nix ./prometheus ./email ./vpn
   ];
 
@@ -30,11 +30,6 @@
     };
 
     fileSystems = {
-      "/" = {
-        fsType = "tmpfs";
-        options = [ "mode=0755" ];
-      };
-
       "/boot" =
         { device = "/dev/disk/by-label/boot";
           fsType = "vfat";
diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix
index fc77f03c..2f86c368 100644
--- a/hosts/vidhar/default.nix
+++ b/hosts/vidhar/default.nix
@@ -5,6 +5,7 @@ with lib;
 {
   imports = with flake.nixosModules.systemProfiles; [
     ./zfs.nix ./network ./samba.nix ./dns ./prometheus ./borg
+    tmpfs-root
     initrd-all-crypto-modules default-locale openssh rebuild-machines
     build-server
     initrd-ssh
@@ -55,13 +56,6 @@ with lib;
       };
     };
 
-    fileSystems = {
-      "/" = {
-        fsType = "tmpfs";
-        options = [ "mode=0755" ];
-      };
-    };
-
     services.timesyncd.enable = false;
     services.chrony = {
       enable = true;
-- 
cgit v1.2.3