summary refs log tree commit diff
path: root/modules/user.nix
diff options
context:
space:
mode:
authorMel <einebeere@gmail.com>2024-12-07 03:24:15 +0100
committerMel <einebeere@gmail.com>2024-12-07 03:41:20 +0100
commit44a4f7c6bac97a3381a2b7de8707cd9389f5460f (patch)
treef31f04984119dbdb6adba41ed8a1ff1303558d27 /modules/user.nix
parent8930b867a5bc863cf1362d3d27579e784a4bbe97 (diff)
downloadnetwork-44a4f7c6bac97a3381a2b7de8707cd9389f5460f.tar.zst
network-44a4f7c6bac97a3381a2b7de8707cd9389f5460f.zip
Move secrets and keys into agenix
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'modules/user.nix')
-rw-r--r--modules/user.nix10
1 files changed, 7 insertions, 3 deletions
diff --git a/modules/user.nix b/modules/user.nix
index 2f49569..4ea0be2 100644
--- a/modules/user.nix
+++ b/modules/user.nix
@@ -1,6 +1,10 @@
-{ config, pkgs, security, ... }:
+{ config, pkgs, keys, ... }:
 
 {
+  age.secrets.password = {
+    file = ../secrets/password.age;
+  };
+
   users.mutableUsers = false;
   users.users.mel = {
     isNormalUser = true;
@@ -8,8 +12,8 @@
     shell = pkgs.fish;
     extraGroups = [ "networkmanager" "wheel" "docker" ];
 
-    hashedPassword = security.password;
-    openssh.authorizedKeys.keys = security.keys;
+    hashedPasswordFile = config.age.secrets.password.path;
+    openssh.authorizedKeys.keys = keys.allUsers;
 
     packages = (with pkgs; []);
   };