kiosk: use sops kiosk secrets file for user

1 files changed, 4 insertions, 1 deletions

diff --git a/2configs/gui/wbob-kiosk.nix b/2configs/gui/wbob-kiosk.nix
index 6b2d2d812..dd9fb874f 100644
--- a/2configs/gui/wbob-kiosk.nix
+++ b/2configs/gui/wbob-kiosk.nix
@@ -1,14 +1,17 @@
-{ pkgs, lib, ... }:
+{ pkgs, config, lib, ... }:
 {
 
   imports = [
       ./base.nix
   ];
+  sops.secrets."passwd/kiosk".neededForUsers = true;
+
   users.users.kiosk = {
     packages = with pkgs;[ chromium vscode spotify tartube-yt-dlp ];
     group = "kiosk";
     isNormalUser = true;
     uid = 1003;
+    passwordFile = config.sops.secrets."passwd/kiosk".path;
     extraGroups = [ "wheel" "audio" "pulse" "pipewire" ];
   };
   users.groups.kiosk.gid = 989 ;