diff --git a/secrets/infinidoge-password.age b/secrets/infinidoge-password.age new file mode 100644 index 0000000..efe59e2 --- /dev/null +++ b/secrets/infinidoge-password.age @@ -0,0 +1,18 @@ +age-encryption.org/v1 +-> ssh-ed25519 sQ/0YA c02kJQfYmd40OLtQSoEgbD5UK1CJYzaO580p5M3tgEE +DtJzSeykrfhkguW4eY9VCuxbHbmG6r6DXm/z9Sv1zdc +-> ssh-ed25519 i9xGKA yQAICj+MGdzyghsgkKuqK4qWRL5OuIheAlHvscNMJCo +4ey8etW2CWuJcrIYRaNNxMLvL2fZ3cea7Zw6FGwbYyY +-> ssh-ed25519 hjL/yw VbSsXF0/vxfadBVBC/xV4LZJ8+u9/sSQiAseLS42zXo +DlW5vP8Nf9mSRocj+APnHpkZwturonw2RsEJmd+R2qY +-> ssh-ed25519 GT2Stg lkEK0we7p518z3r1835txVkeImmmcE79JfF2HRfF5Ck +UTBvgx3DcW92dz3b6O3cVgUS+nYvDQZ6v8LDsyHTn3A +-> ssh-ed25519 oAMyvg a9lDRRjs1JiVoH42aI/wRcU6KkvrYHiByEQhVO0Q2yk +y2V7u09HrO3hBw5FrPxN8r1hCB3Bz0rbjSdn8PpQdb8 +-> ssh-ed25519 VIHjXg Fl+hvzWxSVG380iVOc3vVpQ948lQnSQk4SPgEbGi/Fc +VQwlq52GrwQf33kKX273fdSrbNRyrwHlrWl3gBzMClc +-> bl~--grease h]= ? , Zg$oye +pOIf54JDYVnfIbnOnFAarqD4qZ3CJqyyuBghZ7+wOLdLveZvSzX+ZnOJXflFssbH +aHjQGQVUPQAkdN9WQl74JzyOpXuJzzZWK+5l+/shbaqctlg+sRldaA +--- j1+AKUoaCAtYEQC+xQDHy1gF+5EMqxm69++KdSMOQ3g +S2`qᄧD/^w,0Q# a˃<`4\,wl([ZRD+6J#X:CR|ȡ"O A\1s,"0oB#L\NX A \ No newline at end of file diff --git a/secrets/root-password.age b/secrets/root-password.age new file mode 100644 index 0000000..e6dfe0c --- /dev/null +++ b/secrets/root-password.age @@ -0,0 +1,17 @@ +age-encryption.org/v1 +-> ssh-ed25519 sQ/0YA zo2n26x9z+t64mw9e4cl5/TgioTVogj+6TRZ1yfHCxQ +FV6nBV+bVGrR2Iu8Ot0IX4LO5doc6tpsTbLI9T50/PM +-> ssh-ed25519 i9xGKA xx189w2ULIUuL/tsYb0gp4XyBJ7cjvoI8ROdlk5BHV8 +iTLqLBENG6785I6Li0DSP47X8aJVmKvE7+502AF4SOc +-> ssh-ed25519 hjL/yw bIecDMhhC4naOx9wBOjsblLZIC7+aRjFWzB9axwm8z0 +3hGnbPUhuW/yxcWWAq+hXY11AI6XbrvBr0455N1YWu4 +-> ssh-ed25519 GT2Stg teywSwYE997tn7zk2y6pmD8BEVMnHkAswq79gNpsXXQ +clLyN5/QSyXKYmuZs8m/+Q7dJdcplDbc9agsHvZ1zeg +-> ssh-ed25519 oAMyvg qjCn0XPTSKV+TJiAkAuPJezcT73WaZ/5asqlcSWTERo +Kn2VMvvP48N3zRhOErjyUNYNlYRo1fMUNAECTs+QiEs +-> ssh-ed25519 VIHjXg cWBNZ9IPGFKefIYDM3ozp4h4zHV7oIJREpn8SQGo5DM +vq46Ds0VdMzp2QyVP2VbZDDpBWCcJJeeuP8VQhTl3d4 +-> b-grease K[q& E" +gT6EfmD+g2smtYNs7FK9Irv7YczDX32ngezx8iAwUtvyDA +--- 4UIQiKupkgoRT1eN3v83cj4ELQTEFfG283HFfBylTDA +0ij KF^8WI/7`x3wf|vKO]*ZeB81B2_>3^Rz_  rfT97m seԥ|̧hYBw2G嵽Nڮ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 89f7422..fb07f8a 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -17,4 +17,6 @@ let in { "wireless.age".publicKeys = allKeys; + "infinidoge-password.age".publicKeys = allKeys; + "root-password.age".publicKeys = allKeys; } diff --git a/users/infinidoge/default.nix b/users/infinidoge/default.nix index b899e60..a8272e0 100644 --- a/users/infinidoge/default.nix +++ b/users/infinidoge/default.nix @@ -89,11 +89,12 @@ in software.minipro.enable = true; }; + age.secrets.infinidoge-password.file = "${self}/secrets/infinidoge-password.age"; + user = { name = "infinidoge"; uid = 1000; - hashedPassword = - "PASSWORD SET IN THE FUTURE"; + passwordFile = config.age.secrets.infinidoge-password.path; description = "Infinidoge, primary user of the system"; group = "users"; isNormalUser = true; diff --git a/users/root/default.nix b/users/root/default.nix index 70d60c2..1c9219a 100644 --- a/users/root/default.nix +++ b/users/root/default.nix @@ -1,6 +1,7 @@ -{ lib, ... }: { - users.users.root.hashedPassword = - "PASSWORD SET IN THE FUTURE"; +{ lib, config, self, ... }: { + age.secrets.root-password.file = "${self}/secrets/root-password.age"; + + users.users.root.passwordFile = config.age.secrets.root-password.path; home-manager.users.root = { suites, profiles, ... }: { imports = lib.lists.flatten [