4 files changed, 24 insertions, 16 deletions
diff --git a/profiles/default.nix b/profiles/default.nix
index 87079fa..48da7b4 100644
--- a/profiles/default.nix
+++ b/profiles/default.nix
@@ -4,11 +4,6 @@
     extraOptions = ''
       tarball-ttl = 900
     '';
-    gc = {
-      automatic = true;
-      options = "--delete-older-than 7d";
-      dates = "weekly";
-    };
     package = pkgs.nixVersions.stable;
     settings = {
       trusted-substituters = [
diff --git a/profiles/network/networkd.nix b/profiles/network/networkd.nix
new file mode 100644
index 0000000..9081f59
--- /dev/null
+++ b/profiles/network/networkd.nix
@@ -0,0 +1,16 @@
+{ ... }:
+{
+  networking.useNetworkd = true;
+
+  systemd.network = {
+    enable = true;
+  };
+
+  services.resolved = {
+    enable = true;
+    dnssec = "false";
+    extraConfig = ''
+      DNSOverTLS=yes
+    '';
+  };
+}
diff --git a/profiles/nix/gc.nix b/profiles/nix/gc.nix
new file mode 100644
index 0000000..c39476c
--- /dev/null
+++ b/profiles/nix/gc.nix
@@ -0,0 +1,8 @@
+{ ... }:
+{
+  nix.gc = {
+    automatic = true;
+    options = "--delete-older-than 14d";
+  };
+  nix.optimise.automatic = true;
+}
diff --git a/profiles/server.nix b/profiles/server.nix
index c91546d..78eaf7d 100644
--- a/profiles/server.nix
+++ b/profiles/server.nix
@@ -1,5 +1,4 @@
 {
-  lib,
   pkgs,
   self,
   ...
@@ -27,16 +26,6 @@
       allowPing = true;
       logRefusedConnections = false;
     };
-    useNetworkd = lib.mkDefault true;
-  };
-
-  # Use systemd-resolved for DoT support.
-  services.resolved = {
-    enable = true;
-    dnssec = "false";
-    extraConfig = ''
-      DNSOverTLS=yes
-    '';
   };
 
   # Used by systemd-resolved, not directly by resolv.conf.