From 93444200e650c5dbd3f075f42929ad78c44582f7 Mon Sep 17 00:00:00 2001
From: Mikhail Klementev <blame@dumpstack.io>
Date: Fri, 3 Jan 2020 09:25:01 +0000
Subject: [PATCH] Faultless auto-update

---
 auto-update.nix   | 21 +++++++++++++++++++++
 configuration.nix | 11 ++---------
 2 files changed, 23 insertions(+), 9 deletions(-)
 create mode 100644 auto-update.nix

diff --git a/auto-update.nix b/auto-update.nix
new file mode 100644
index 0000000..1d65acb
--- /dev/null
+++ b/auto-update.nix
@@ -0,0 +1,21 @@
+{ pkgs, ...}:
+{
+  systemd.services.nixos-update = {
+    description = "NixOS Update";
+    serviceConfig.Type = "oneshot";
+    script = ''
+      # Using su is more faultless than trying to reproduce the environment in
+      # the way how it implemented in nixos/modules/tasks/auto-upgrade.nix
+      ${pkgs.su}/bin/su root -c 'nix-channel --update'
+      ${pkgs.su}/bin/su root -c 'NIXOS_LABEL=auto-update nixos-rebuild boot --upgrade'
+    '';
+  };
+
+  systemd.timers.nixos-update = {
+    description = "Run NixOS Update 30m after the start and then every 6h";
+    timerConfig.OnBootSec = "30m";
+    timerConfig.OnUnitInactiveSec = "6h";
+    timerConfig.Unit = "nixos-update.service";
+    wantedBy = ["timers.target"];
+  };
+}
diff --git a/configuration.nix b/configuration.nix
index 1d0b45b..3e4099e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -18,6 +18,7 @@ in {
       ./docker.nix
       ./home-manager.nix
       ./thinkpad.nix
+      ./auto-update.nix
     ];
 
   time.timeZone = "UTC";
@@ -53,15 +54,7 @@ in {
   boot.loader.efi.canTouchEfiVariables = true;
   boot.tmpOnTmpfs = true;
 
-  # force update all channels
-  systemd.services.nixos-upgrade.serviceConfig.ExecStartPre =
-    "/bin/sh -c '${pkgs.nix}/bin/nix-channel --update'";
-
-  systemd.timers.nixos-upgrade.timerConfig.OnBootSec = "30m";
-  systemd.timers.nixos-upgrade.timerConfig.Persistent = true;
-
-  system.stateVersion = "19.03";
-  system.autoUpgrade.enable = true;
+  system.stateVersion = "19.09";
 
   nix.optimise.automatic = true;
   nix.gc.automatic = true;