Add jupiter vps

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/common/configs/system/impermanence/options.nix

@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   utils,
   ...
 }:
@@ -47,12 +48,16 @@ in
     with lib;
     with types;
     {
-      impermanence.device = mkOption {
-        type = str;
-        default = config.disko.devices.disk.main.content.partitions.root.content.content.device;
-        description = ''
-          LUKS BTRFS partition to wipe on boot.
-        '';
+      impermanence = {
+        enable = mkEnableOption "Impermanence";
+
+        device = mkOption {
+          type = str;
+          default = config.disko.devices.disk.main.content.partitions.root.content.content.device;
+          description = ''
+            LUKS BTRFS partition to wipe on boot.
+          '';
+        };
       };
 
       persistence =
@@ -179,7 +184,32 @@ in
     let
       all = lib.lists.flatten (builtins.concatMap builtins.attrValues (builtins.attrValues cfg));
     in
-    {
+    lib.mkIf config.environment.impermanence.enable {
+      boot.initrd.systemd = {
+        enable = true;
+
+        initrdBin = with pkgs; [
+          coreutils
+          util-linux
+          findutils
+          btrfs-progs
+        ];
+
+        services.impermanence = {
+          description = "Rollback BTRFS subvolumes to a pristine state";
+          wantedBy = [ "initrd.target" ];
+          before = [ "sysroot.mount" ];
+          after = [
+            "cryptsetup.target"
+            "local-fs-pre.target"
+          ];
+          unitConfig.DefaultDependencies = false;
+          serviceConfig.Type = "oneshot";
+          environment.DEVICE = config.environment.impermanence.device;
+          script = builtins.readFile ./scripts/wipe.sh;
+        };
+      };
+
       fileSystems = builtins.mapAttrs (_: _: { neededForBoot = true; }) cfg;
 
       systemd = {
@@ -244,6 +274,13 @@ in
         );
       };
 
+      environment.persistence."/persist" = {
+        "/etc/nixos" = { };
+        "/var/lib/nixos" = { };
+        "/var/lib/systemd" = { };
+        "/var/log" = { };
+      };
+
       assertions =
         let
           paths = builtins.map (c: c.path) all;