yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request 'Rework and fix root-password module' (#1171) from docs into main

Browse Source 
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/1171
This commit is contained in:
Mic92
2024-04-12 12:00:43 +00:00
parent 895f6fbc8a 3f8ab35a19
commit 573a462aee
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
clanModules/root-password.nix
View File

@@ -1,11 +1,12 @@
{ pkgs, config, ... }:
{
users.mutableUsers = false;
users.extraUsers.root.hashedPasswordFile = "/run/secrets-for-users/passwordHash";
sops.secrets."${config.clanCore.machineName}-passwordHash".neededForUsers = true;
clanCore.facts.services.password = {
users.users.root.hashedPasswordFile =
config.clanCore.facts.services.root-password.secret.password-hash.path;
sops.secrets."${config.clanCore.machineName}-password-hash".neededForUsers = true;
clanCore.facts.services.root-password = {
secret.password = { };
secret.passwordHash = { };
secret.password-hash = { };
generator.path = with pkgs; [
coreutils
xkcdpass
@@ -13,7 +14,7 @@
];
generator.script = ''
xkcdpass --numwords 3 --delimiter - --count 1 > $secrets/password
cat $secrets/password | mkpasswd -s -m sha-512 > $secrets/passwordHash
cat $secrets/password | mkpasswd -s -m sha-512 > $secrets/password-hash
'';
};
}