flake: migrate to agenix-rekey

This commit is contained in:
Infinidoge 2025-02-18 21:47:38 -05:00
parent 26734c2196
commit b54be3998f
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
61 changed files with 306 additions and 190 deletions

View file

@ -2,14 +2,15 @@
config,
lib,
pkgs,
secrets,
...
}:
{
users.users.root = {
shell = pkgs.zsh;
hashedPasswordFile = lib.mkIf config.modules.secrets.enable config.secrets.root-password;
hashedPasswordFile = lib.mkIf config.modules.secrets.enable secrets.password-root;
openssh.authorizedKeys.keys = import ./ssh-keys.nix;
};
home-manager.users.root = { ... }: { };
age.secrets.password-root.rekeyFile = ./password.age;
}