pastila: enable zfs scrub/snapshot

common/configuration.nix

@@ -10,6 +10,8 @@
   services.openssh.enable = true;
   services.openssh.settings.PermitRootLogin = lib.mkDefault "no";
 
+  services.fail2ban.enable = true;
+
   # Activate nix flakes.
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 

pastila/configuration.nix

@@ -17,6 +17,22 @@ in
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/vda";
 
+  # use the latest kernel compatible with zfs
+  boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
+
+  # setup automatic snapshots (~short term: retain no more than 1 month)
+  services.zfs.autoSnapshot = {
+    enable = true;
+    frequent = 0;
+    monthly = 0;
+  };
+
+  # automatic scrub, 10th of each month at 3AM
+  services.zfs.autoScrub = {
+    enable = true;
+    interval = "*-*-10 03:00:00";
+  };
+
   networking.hostName = "pastila"; # Define your hostname.
   networking.hostId = "8425e349";