From 760f2ac66d4fbd6ee4e77e3c4e552c65f3cea1ce Mon Sep 17 00:00:00 2001
From: colin <colin@uninsane.org>
Date: Wed, 28 Dec 2022 09:31:33 +0000
Subject: [PATCH] move ~/.cache into encrypted private dir

---
 hosts/common/users.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/hosts/common/users.nix b/hosts/common/users.nix
index 34707fc3c..2c59abc2e 100644
--- a/hosts/common/users.nix
+++ b/hosts/common/users.nix
@@ -84,8 +84,7 @@ in
 
     sane.impermanence.home-dirs = [
       # cache is probably too big to fit on the tmpfs
-      # TODO: we could bind-mount it to something which gets cleared per boot, though.
-      ".cache"
+      { directory = ".cache"; encryptedClearOnBoot = true; }
       ".cargo"
       ".rustup"
       # TODO: move this to ~/private!