From ad7b2dd7276335cf542c6076e51034c8be5315ed Mon Sep 17 00:00:00 2001
From: imxyy_soope_ <imxyy1soope1@gmail.com>
Date: Tue, 24 Feb 2026 16:50:17 +0800
Subject: [PATCH] angrr: update settings

---
 modules/core/nix.nix | 32 +++++++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/modules/core/nix.nix b/modules/core/nix.nix
index af03a22..7345364 100644
--- a/modules/core/nix.nix
+++ b/modules/core/nix.nix
@@ -40,9 +40,9 @@ in
     nix.settings = {
       experimental-features = "nix-command flakes pipe-operators";
       substituters = [
-        "https://mirror.sjtu.edu.cn/nix-channels/store"
-        "https://mirrors.sjtug.sjtu.edu.cn/nix-channels/store"
         "https://mirrors.ustc.edu.cn/nix-channels/store"
+        "https://mirrors.sjtug.sjtu.edu.cn/nix-channels/store"
+        "https://mirror.sjtu.edu.cn/nix-channels/store"
         "https://nix-community.cachix.org"
         "https://cache.garnix.io"
       ];
@@ -92,7 +92,33 @@ in
     services.angrr = {
       enable = true;
       settings = {
-        period = "1month";
+        temporary-root-policies = {
+          direnv = {
+            path-regex = "/\\.direnv/";
+            period = "14d";
+          };
+          result = {
+            path-regex = "/result[^/]*$";
+            period = "3d";
+          };
+        };
+        profile-policies = {
+          system = {
+            profile-paths = [ "/nix/var/nix/profiles/system" ];
+            keep-since = "14d";
+            keep-latest-n = 5;
+            keep-booted-system = true;
+            keep-current-system = true;
+          };
+          user = {
+            profile-paths = [
+              "~/.local/state/nix/profiles/profile"
+              "/nix/var/nix/profiles/per-user/root/profile"
+            ];
+            keep-since = "14d";
+            keep-latest-n = 5;
+          };
+        };
       };
     };
   };