fix: NixOS | remove sops from user password and use hashed password

This commit is contained in:
Shahab Dogar
2025-02-10 09:34:15 +05:00
parent c4d6a69837
commit ab132c2d3b

View File

@@ -8,9 +8,9 @@
pkgs,
hostname,
...
}: let
secretspath = builtins.toString inputs.nix-secrets;
in {
}:
{
# Bootloader.
boot = {
loader = {
@@ -115,8 +115,7 @@ in {
isNormalUser = true;
description = "Shahab Dogar";
extraGroups = ["networkmanager" "wheel" "input" "libvirtd"];
initialPassword = "tempPass";
hashedPasswordFile = config.sops.secrets."user_passwords/shahab".path;
hashedPassword = "$y$j9T$pvjyL7hL5x2VBarGNTnMl1$mLA2UsWTbfp8Hgp/ug5l8224thi..Mo8.p7ME.tDZ.4";
openssh.authorizedKeys = {
keys = [
@@ -126,19 +125,6 @@ in {
};
};
sops = {
defaultSopsFile = "${secretspath}/secrets.yaml";
age = {
sshKeyPaths = ["/home/shahab/.ssh/id_ed25519"];
keyFile = "/home/shahab/.config/sops/age/keys.txt";
};
secrets = {
"user_passwords/shahab" = {
neededForUsers = true;
};
};
};
# Allow unfree packages
nixpkgs = {
config = {