{ config, pkgs, ... }:
{
  environment.persistence."/nix/persist" = {
    hideMounts = true;
    directories = [
      "/var/log"
      "/var/lib/bluetooth"
      "/var/lib/nixos"
      "/var/lib/systemd/coredump"
      "/var/lib/systemd/timers"
      "/var/lib/fprint"
      "/var/lib/libvirt"
      "/var/lib/teamspeak3-server"
      "/etc/NetworkManager"
      "/var/lib/sddm"
      "/etc/ssh"
      "/etc/nixos"
      "/var/lib/incus"
      { directory = "/var/lib/colord"; user = "colord"; group = "colord"; mode = "u=rwx,g=rx,o="; }
    ];
    files = [
      "/etc/machine-id"
      { file = "/var/keys/secret_file"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
    ];
  };
}