lots

common/nixos/default.nix

@@ -1,10 +1,12 @@
-{lib, ...}: {
+{ lib, ... }:
+{
   imports = [
     ./common.nix
     ./laptop.nix
     ./nfs.nix
     ./restic.nix
     ./ssh/default.nix
+    ./logrotate.nix
   ];
 
   laptop.enable = lib.mkDefault false;

common/nixos/logrotate.nix

@@ -0,0 +1,14 @@
+{
+  ...
+}:
+{
+
+  services.logrotate = {
+    settings = {
+      "var/log/audit/audit.log" = {
+        frequency = "daily";
+        rotate = 3;
+      };
+    };
+  };
+}

common/nixos/packages.nix

@@ -6,7 +6,8 @@
   inputs,
   outputs,
   ...
-}: {
+}:
+{
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.
   programs.gnupg.agent = {
@@ -20,7 +21,7 @@
     alejandra
     sops
     just
-    vim
+    # vim
     wget
     home-manager
     git