summaryrefslogtreecommitdiff
path: root/os/srv/aide.nix
diff options
context:
space:
mode:
authoradikro <adikro@disroot.org>2026-05-18 15:25:50 +0200
committeradikro <adikro@disroot.org>2026-05-18 15:25:50 +0200
commitc6b6a3e6c702834eac2b633db2ed4c397b4ae113 (patch)
tree4ec03c63fac3c7d0e7caea31cbe9ec1317df8c2f /os/srv/aide.nix
parent62b7ca3cdfff5182daad7f4092b6861bbc93f04c (diff)
set up disko, zfs, clamav aide, backup, nfs, zfs for oci and ups
Diffstat (limited to 'os/srv/aide.nix')
-rw-r--r--os/srv/aide.nix30
1 files changed, 30 insertions, 0 deletions
diff --git a/os/srv/aide.nix b/os/srv/aide.nix
new file mode 100644
index 0000000..8bd4c6a
--- /dev/null
+++ b/os/srv/aide.nix
@@ -0,0 +1,30 @@
+{
+ config,
+ lib,
+ pkgs,
+ ...
+}:
+let
+ cfg = config.os.srv.aide;
+in
+{
+ options.os.srv.aide.enable = lib.mkEnableOption "enables aide checking";
+ config = lib.mkIf cfg.enable {
+ systemd = {
+ services.aide-check = {
+ description = "Daily File Integrity Operational Check";
+ serviceConfig = {
+ Type = "oneshot";
+ ExecStart = "${pkgs.aide}/bin/aide --check";
+ };
+ };
+ timers.aide-check = {
+ wantedBy = [ "timers.target" ];
+ timerConfig = {
+ OnCalendar = "daily";
+ Persistent = true;
+ };
+ };
+ };
+ };
+}