Use agenix for initial user credential
This commit is contained in:
25
flake.nix
25
flake.nix
@ -98,27 +98,26 @@
|
||||
users = {
|
||||
sezycei = {
|
||||
isNormalUser = true;
|
||||
initialPassword = "bootMaster";
|
||||
passwordFile = config.age.secrets.sezycei.path;
|
||||
extraGroups = [ "wheel" ];
|
||||
packages = with pkgs; [ byobu tmux stack ];
|
||||
packages = with pkgs; [
|
||||
byobu
|
||||
tmux
|
||||
stack
|
||||
];
|
||||
};
|
||||
torrent = {
|
||||
isNormalUser = true;
|
||||
initialPassword = "torrentUserTemp";
|
||||
};
|
||||
};
|
||||
|
||||
};
|
||||
|
||||
age.secrets.keys.file = ./secrets/keys.age;
|
||||
|
||||
#sops = {
|
||||
# age = { sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; };
|
||||
# defaultSopsFile = ./secrets/keys.yaml;
|
||||
# secrets = {
|
||||
# hostname = { };
|
||||
# };
|
||||
#};
|
||||
age = {
|
||||
secrets = {
|
||||
keys.file = ./secrets/keys.age;
|
||||
sezycei.file = ./secrets/sezycei.age;
|
||||
};
|
||||
};
|
||||
|
||||
system.stateVersion = "22.11";
|
||||
})
|
||||
|
Reference in New Issue
Block a user