From b3fb6115eb270dafec595e737c6b28bd93f463f4 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sat, 4 Apr 2026 00:20:22 -0600
Subject: sys/baseline: remove /var/lib/dhparams from persistence list

---
 sys/baseline/default.nix  | 10 ----------
 sys/boot/impermanence.nix |  6 ++++++
 2 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/sys/baseline/default.nix b/sys/baseline/default.nix
index f8ae5d9..3702921 100644
--- a/sys/baseline/default.nix
+++ b/sys/baseline/default.nix
@@ -44,16 +44,6 @@ with lib; {
 
     lib.local = pkgs.local.lib;
 
-    local.boot.impermanence = {
-      directories = [
-        "/var/lib/dhparams"
-      ];
-
-      trust.directories = [
-        "/var/trust"
-      ];
-    };
-
     nix = {
       package = pkgs.nix;
 
diff --git a/sys/boot/impermanence.nix b/sys/boot/impermanence.nix
index bdf6a90..857915c 100644
--- a/sys/boot/impermanence.nix
+++ b/sys/boot/impermanence.nix
@@ -59,6 +59,12 @@ in {
             "/etc/subuid"
             "/etc/subgid"
           ];
+
+        trust = {
+          directories = [
+            "/var/trust"
+          ];
+        };
       };
     }
     (mkIf cfg.enable {
-- 
cgit v1.2.3