From 7688f7f735ca862264bcb4d8327170e67fb89782 Mon Sep 17 00:00:00 2001
From: Lemon Lam <alemonmk@users.noreply.github.com>
Date: Tue, 21 Apr 2026 12:18:18 +0800
Subject: [PATCH] nixos/warpgate: add `log.audit_retention`

... and clarify what `log.retention` does
---
 nixos/modules/services/security/warpgate.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/security/warpgate.nix b/nixos/modules/services/security/warpgate.nix
index 2cb9d44e92a0..4ca994e70f31 100644
--- a/nixos/modules/services/security/warpgate.nix
+++ b/nixos/modules/services/security/warpgate.nix
@@ -349,8 +349,13 @@ in
                   "json"
                 ];
               };
+              audit_retention = mkOption {
+                description = "How long Warpgate keeps its audit logs.";
+                default = "1year";
+                type = str;
+              };
               retention = mkOption {
-                description = "How long Warpgate keep its logs.";
+                description = "How long Warpgate keeps its non-audit logs and session recordings.";
                 default = "7days";
                 type = str;
               };