From ccb3bdb740a86b6830523829f89bcae37ce43381 Mon Sep 17 00:00:00 2001
From: vdbe <vdbewout@gmail.com>
Date: Sun, 2 Mar 2025 17:38:51 +0100
Subject: [PATCH] clanModules/root-password: don't deploy plain text password

---
 clanModules/root-password/roles/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/clanModules/root-password/roles/default.nix b/clanModules/root-password/roles/default.nix
index 9b45cba1e..8c5eadead 100644
--- a/clanModules/root-password/roles/default.nix
+++ b/clanModules/root-password/roles/default.nix
@@ -12,6 +12,9 @@
     files.password-hash = {
       neededFor = "users";
     };
+    files.password = {
+      deploy = false;
+    };
     migrateFact = "root-password";
     runtimeInputs = [
       pkgs.coreutils