From 306d89a86f3637da0b043d54a0ee1e0a8a10ed0c Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Fri, 7 Feb 2025 21:39:16 -0800
Subject: migration: disable allowOther on secure home persist

---
 snowfall/modules/home/impermanence/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/snowfall/modules/home/impermanence/default.nix b/snowfall/modules/home/impermanence/default.nix
index 1b92bca..c1d1a2d 100644
--- a/snowfall/modules/home/impermanence/default.nix
+++ b/snowfall/modules/home/impermanence/default.nix
@@ -7,7 +7,7 @@ in {
   imports = [
     inputs.impermanence.nixosModules.home-manager.impermanence
   ];
-  
+
   options.${namespace}.impermanence = with types; {
     skeleton = mkOption {
       type = bool;
@@ -45,6 +45,7 @@ in {
 
     home.persistence.${cfg.secure.location} = {
       enable = builtins.elem host hosts;
+      allowOther = false;
     };
   };
 }
-- 
cgit v1.2.3