feat: set irl's password

nixos/common.nix

@@ -1,8 +1,30 @@
-{ pkgs, ... }:
+{
+  pkgs,
+  config,
+  sops-nix,
+  ...
+}:
 
 {
+  imports = [
+    sops-nix.nixosModules.sops
+  ];
+
   nix.settings.experimental-features = "nix-command flakes";
 
+  sops = {
+    defaultSopsFile = ../secrets.yaml;
+    validateSopsFiles = false;
+
+    age = {
+      sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+      keyFile = "/var/lib/sops-nix/key.txt";
+      generateKey = true;
+    };
+
+    secrets.irl-password.neededForUsers = true;
+  };
+
   time.timeZone = "Europe/London";
 
   i18n.defaultLocale = "en_GB.UTF-8";
@@ -19,9 +41,12 @@
     LC_TIME = "en_GB.UTF-8";
   };
 
+  users.mutableUsers = false;
+
   users.users.irl = {
     isNormalUser = true;
     description = "irl";
+    hashedPasswordFile = config.sops.secrets.irl-password.path;
     extraGroups = [
       "networkmanager"
       "wheel"