also fix user-password with password-store
This commit is contained in:
@@ -9,9 +9,9 @@
|
|||||||
users.users.root.hashedPasswordFile =
|
users.users.root.hashedPasswordFile =
|
||||||
config.clan.core.facts.services.root-password.secret.password-hash.path;
|
config.clan.core.facts.services.root-password.secret.password-hash.path;
|
||||||
|
|
||||||
sops.secrets."${config.clan.core.machineName}-password-hash".neededForUsers = lib.mkIf (
|
sops.secrets = lib.mkIf (config.clan.core.facts.secretStore == "sops") {
|
||||||
config.clan.core.facts.secretStore == "sops"
|
"${config.clan.core.machineName}-password-hash".neededForUsers = true;
|
||||||
) true;
|
};
|
||||||
|
|
||||||
clan.core.facts.services.root-password = {
|
clan.core.facts.services.root-password = {
|
||||||
secret.password = { };
|
secret.password = { };
|
||||||
|
|||||||
@@ -23,7 +23,11 @@
|
|||||||
users.mutableUsers = false;
|
users.mutableUsers = false;
|
||||||
users.users.${config.clan.user-password.user}.hashedPasswordFile =
|
users.users.${config.clan.user-password.user}.hashedPasswordFile =
|
||||||
config.clan.core.facts.services.user-password.secret.user-password-hash.path;
|
config.clan.core.facts.services.user-password.secret.user-password-hash.path;
|
||||||
sops.secrets."${config.clan.core.machineName}-user-password-hash".neededForUsers = true;
|
|
||||||
|
sops.secrets = lib.mkIf (config.clan.core.facts.secretStore == "sops") {
|
||||||
|
"${config.clan.core.machineName}-user-password-hash".neededForUsers = true;
|
||||||
|
};
|
||||||
|
|
||||||
clan.core.facts.services.user-password = {
|
clan.core.facts.services.user-password = {
|
||||||
secret.user-password = { };
|
secret.user-password = { };
|
||||||
secret.user-password-hash = { };
|
secret.user-password-hash = { };
|
||||||
|
|||||||
Reference in New Issue
Block a user