feat: set up declarative password with sops

This commit is contained in:
Nick 2025-11-05 23:36:54 -06:00
parent a5e7d1bbf6
commit fee6830edc
4 changed files with 14 additions and 19 deletions

View file

@ -16,22 +16,23 @@ in
{
sops.secrets = {
"passwords/user0" = {
"password-user0" = {
neededForUsers = true;
sopsFile = ../../secrets/secrets.yaml;
};
};
users = {
users = {
"root" = {
hashedPasswordFile = config.sops.secrets."passwords/user0".path;
hashedPasswordFile = config.sops.secrets."password-user0".path;
};
${user0} = {
description = name;
name = user0;
isNormalUser = true;
shell = pkgs.nushell;
hashedPasswordFile = config.sops.secrets."passwords/user0".path;
hashedPasswordFile = config.sops.secrets."password-user0".path;
extraGroups = [
"adbusers"
"caddy"