configuration.nix

@@ -68,8 +68,17 @@ in {
   # Clean tmp directory on shutdown
   boot.cleanTmpDir = true;
 
-  # Keep logs for a week
-  services.journald.extraConfig = "MaxRetentionSec=1week";
+  # Rotate logs after 7 days
+  services.logrotate = {
+    enable = true;
+    settings = {
+      "/var/log/journal" = {
+        frequency = "weekly";
+        rotate = 7;
+      };
+    };
+  };
+  systemd.services.logrotate.startAt = lib.mkForce "12:00:00";
 
   # Allow propietary software and build packages with Pulseaudio support
   nixpkgs.config = {

flake.lock

@@ -38,11 +38,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1657447684,
-        "narHash": "sha256-FCP9AuU1q6PE3vOeM5SFf58f/UKPBAsoSGDUGamNBbo=",
+        "lastModified": 1657114324,
+        "narHash": "sha256-fWuaUNXrHcz/ciHRHlcSO92dvV3EVS0GJQUSBO5JIB4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "5f43d8b088d3771274bcfb69d3c7435b1121ac88",
+        "rev": "a5c867d9fe9e4380452628e8f171c26b69fa9d3d",
         "type": "github"
       },
       "original": {

flake.nix

@@ -11,10 +11,8 @@
 
   inputs = {
     nixpkgs.url = "nixpkgs/nixos-unstable";
-    agenix = {
-      url = "github:ryantm/agenix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
+    agenix.url = "github:ryantm/agenix";
+    agenix.inputs.nixpkgs.follows = "nixpkgs";
     openconnect-sso = {
       url = "github:vlaci/openconnect-sso";
       flake = false;

modules/networking.nix

@@ -32,9 +32,9 @@
       Name = "wlan0";
       SSID = "WiFi-5.0-CE42";
     };
-    address = [ "192.168.13.131/24" ];
-    gateway = [ "192.168.13.1" ];
-    dns = [ "192.168.13.2" ];
+    address = [ "192.168.1.131/24" ];
+    gateway = [ "192.168.1.1" ];
+    dns = [ "192.168.1.2" ];
     networkConfig.DNSSEC = "no";
   };