Gabe/nix-config
1
0
Fork 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity

password hash is now plain file in private repo.

Browse source
This commit is contained in:
Gabe Venberg 2024-06-05 19:10:12 -05:00
parent 04783f1580
commit 7642191e98
10 changed files with 11 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

3
configs/nixos/common.nix
View file

@ -40,12 +40,15 @@
programs.zsh.enable = lib.mkDefault true;
environment.shells = lib.mkDefault [pkgs.zsh];
users.mutableUsers = false;
users.users.${config.host.user} = {
isNormalUser = true;
hashedPassword = lib.removeSuffix "\n" (builtins.readFile "${inputs.nix-secrets}/password-hash");
description = config.host.fullName;
shell = pkgs.zsh;
extraGroups = ["wheel"];
};
# users.users.root.password = lib.removeSuffix "\n" (builtins.readFile "${inputs.nix-secrets}/password-hash");
imports = [
../../modules/hostopts.nix

1
configs/nixos/secrets.nix
View file

@ -11,7 +11,6 @@ in {
inputs.sops-nix.nixosModules.sops
];
sops = {
defaultSopsFile = "${secretsDirectory}/common.yaml";
validateSopsFiles = false;
age = {
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];