initial commit

modules/features/system/system-services.nix

@@ -0,0 +1,41 @@
+{ ... }:
+{
+  config.dendritic.features.system-services = {
+    nixosModules = [
+      (
+        { ... }:
+        {
+          users.groups.netdev = { };
+
+          services = {
+            dbus.implementation = "broker";
+
+            logrotate = {
+              enable = true;
+              settings = {
+                header = {
+                  dateext = true;
+                };
+
+                "var/log/audit/audit.log" = {
+                  frequency = "daily";
+                  rotate = 3;
+                  size = "100k";
+                };
+              };
+            };
+
+            journald = {
+              storage = "volatile"; # Store logs in memory
+              upload.enable = false; # Disable remote log upload (the default)
+              extraConfig = ''
+                SystemMaxUse=500M
+                SystemMaxFileSize=50M
+              '';
+            };
+          };
+        }
+      )
+    ];
+  };
+}