yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

root-password: fix password-store support

Browse Source
This commit is contained in:
Jörg Thalheim
2024-07-21 17:57:13 +02:00
parent faf0528be2
commit 16d25ab6e8
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
clanModules/root-password/default.nix
View File

@@ -1,9 +1,18 @@
{ pkgs, config, ... }: {
pkgs,
config,
lib,
...
}:
{ {
users.mutableUsers = false; users.mutableUsers = false;
users.users.root.hashedPasswordFile = users.users.root.hashedPasswordFile =
config.clan.core.facts.services.root-password.secret.password-hash.path; config.clan.core.facts.services.root-password.secret.password-hash.path;
sops.secrets."${config.clan.core.machineName}-password-hash".neededForUsers = true;
sops.secrets."${config.clan.core.machineName}-password-hash".neededForUsers = lib.mkIf (
config.clan.core.facts.secretStore == "sops"
) true;
clan.core.facts.services.root-password = { clan.core.facts.services.root-password = {
secret.password = { }; secret.password = { };
secret.password-hash = { }; secret.password-hash = { };