1
0
Fork 0
forked from irl/nix-configs

feat: set irl's password

This commit is contained in:
Iain Learmonth 2025-06-13 18:57:19 +01:00
parent b40c4d8d57
commit 6224c55ab4
5 changed files with 105 additions and 2 deletions

View file

@ -1,8 +1,30 @@
{ pkgs, ... }:
{
pkgs,
config,
sops-nix,
...
}:
{
imports = [
sops-nix.nixosModules.sops
];
nix.settings.experimental-features = "nix-command flakes";
sops = {
defaultSopsFile = ../secrets.yaml;
validateSopsFiles = false;
age = {
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
keyFile = "/var/lib/sops-nix/key.txt";
generateKey = true;
};
secrets.irl-password.neededForUsers = true;
};
time.timeZone = "Europe/London";
i18n.defaultLocale = "en_GB.UTF-8";
@ -19,9 +41,12 @@
LC_TIME = "en_GB.UTF-8";
};
users.mutableUsers = false;
users.users.irl = {
isNormalUser = true;
description = "irl";
hashedPasswordFile = config.sops.secrets.irl-password.path;
extraGroups = [
"networkmanager"
"wheel"