clanModules: Set lib.mkDefault isNormalUser for user-password
This commit is contained in:
@@ -4,6 +4,9 @@
|
|||||||
lib,
|
lib,
|
||||||
...
|
...
|
||||||
}:
|
}:
|
||||||
|
let
|
||||||
|
cfg = config.clan.user-password;
|
||||||
|
in
|
||||||
{
|
{
|
||||||
options.clan.user-password = {
|
options.clan.user-password = {
|
||||||
user = lib.mkOption {
|
user = lib.mkOption {
|
||||||
@@ -21,8 +24,10 @@
|
|||||||
|
|
||||||
config = {
|
config = {
|
||||||
users.mutableUsers = false;
|
users.mutableUsers = false;
|
||||||
users.users.${config.clan.user-password.user}.hashedPasswordFile =
|
users.users.${cfg.user} = {
|
||||||
config.clan.core.facts.services.user-password.secret.user-password-hash.path;
|
hashedPasswordFile = config.clan.core.facts.services.user-password.secret.user-password-hash.path;
|
||||||
|
isNormalUser = lib.mkDefault true;
|
||||||
|
};
|
||||||
|
|
||||||
sops.secrets = lib.mkIf (config.clan.core.facts.secretStore == "sops") {
|
sops.secrets = lib.mkIf (config.clan.core.facts.secretStore == "sops") {
|
||||||
"${config.clan.core.machineName}-user-password-hash".neededForUsers = true;
|
"${config.clan.core.machineName}-user-password-hash".neededForUsers = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user