gc: Enable on servers with gcroot cleanup only

hosts/vps-monitor/default.nix

@@ -21,6 +21,11 @@
     boot.loader.grub.enable = true;
 
     services = {
+      gc = {
+        enable = true;
+        onlyCleanRoots = true;
+      };
+
       tailscale.enable = true;
 
       nebula.node = {

hosts/vps-private/default.nix

@@ -25,6 +25,11 @@
       boot.loader.systemd-boot.enable = true;
 
       services = {
+        gc = {
+          enable = true;
+          onlyCleanRoots = true;
+        };
+
         tailscale = {
           enable = true;
           exitNode.enable = true;

hosts/vps-public/default.nix

@@ -21,6 +21,11 @@
     boot.loader.systemd-boot.enable = true;
 
     services = {
+      gc = {
+        enable = true;
+        onlyCleanRoots = true;
+      };
+
       tailscale.enable = true;
 
       nebula.node = {

modules/system/services/gc.nix

@@ -1,14 +1,26 @@
 { config, lib, ... }:
+let
+  cfg = config.custom.services.gc;
+in
 {
-  options.custom.services.gc.enable = lib.mkEnableOption "";
+  options.custom.services.gc = {
+    enable = lib.mkEnableOption "";
+    onlyCleanRoots = lib.mkEnableOption "";
+  };
 
-  config = lib.mkIf config.custom.services.gc.enable {
+  config = lib.mkIf cfg.enable {
     programs.nh = {
       enable = true;
       clean = {
         enable = true;
         dates = "weekly";
-        extraArgs = "--keep 10 --keep-since 7d";
+        extraArgs =
+          [
+            "--keep 10"
+            "--keep-since 7d"
+            (lib.optionalString cfg.onlyCleanRoots "--no-gc")
+          ]
+          |> lib.concatStringsSep " ";
       };
     };
   };