2configs/secrets/user-passwords.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

{ config, ... }:
{
  imports = [ ./default.nix ];

  sops.secrets = {
    "passwd/makefu" = {
      neededForUsers = true;
      sopsFile = ../../secrets/common.yaml;
    };
    "passwd/root" = {
      neededForUsers = true;
      sopsFile = ../../secrets/common.yaml;
    };
  };

  users.users = {
    makefu.passwordFile = config.sops.secrets."passwd/makefu".path;
    root.passwordFile = config.sops.secrets."passwd/root".path;
  };
}