@@ -48,7 +48,36 @@ };
 
   services.angrr = {
     enable = true;
-    period = "30d";
-    ownedOnly = false;
+    settings = {
+      temporary-root-policies = {
+        direnv = {
+          path-regex = "/\\.direnv/";
+          period = "14d";
+        };
+        result = {
+          path-regex = "/result[^/]*$";
+          period = "3d";
+        };
+      };
+      profile-policies = {
+        system = {
+          profile-paths = [ "/nix/var/nix/profiles/system" ];
+          keep-since = "30d";
+          keep-latest-n = 5;
+          keep-booted-system = true;
+          keep-current-system = true;
+        };
+        user = {
+          enable = true;
+          profile-paths = [
+            # `~` at the beginning will be expanded to the home directory of each discovered user
+            "~/.local/state/nix/profiles/profile"
+            "/nix/var/nix/profiles/per-user/root/profile"
+          ];
+          keep-since = "3d";
+          keep-latest-n = 1;
+        };
+      };
+    };
   };
 }