{ ... }:
{
  environment.persistence."/persist" = {
    hideMounts = true;
    directories = [
      "/storage"
      "/etc/nixos"
      "/var/lib/nixos"
      { directory = "/etc/secureboot"; mode = "0700"; }
    ];
    files = [
      "/etc/machine-id"
      "/root/.gitconfig"
    ];
  };
}