nix-config/modules/features/system/system-services.nix

{ ... }:
{
  config.dendritic.features.system-services = {
    nixosModules = [
      (
        { ... }:
        {
          users.groups.netdev = { };

          services = {
            dbus.implementation = "broker";

            logrotate = {
              enable = true;
              settings = {
                header = {
                  dateext = true;
                  dateformat = "-%Y%m%d-%s";
                };

                "var/log/audit/audit.log" = {
                  frequency = "daily";
                  rotate = 3;
                  size = "100k";
                };
              };
            };

            journald = {
              storage = "volatile"; # Store logs in memory
              upload.enable = false; # Disable remote log upload (the default)
              extraConfig = ''
                SystemMaxUse=500M
                SystemMaxFileSize=50M
              '';
            };
          };
        }
      )
    ];
  };
}