feat: move to single-user config
This commit is contained in:
@@ -1,17 +1,13 @@
|
||||
{ lib, ... }:
|
||||
{ config, ... }:
|
||||
let
|
||||
account = config.repo.account;
|
||||
in
|
||||
{
|
||||
flake.modules.nixos.sops-password =
|
||||
{ config, ... }:
|
||||
{
|
||||
sops.secrets = lib.mapAttrs' (
|
||||
userName: _:
|
||||
lib.nameValuePair "hashed-password-${userName}" {
|
||||
neededForUsers = true;
|
||||
}
|
||||
) config.meta.machine.users;
|
||||
sops.secrets.hashed-password.neededForUsers = true;
|
||||
|
||||
users.users = lib.mapAttrs (userName: _: {
|
||||
hashedPasswordFile = config.sops.secrets."hashed-password-${userName}".path;
|
||||
}) config.meta.machine.users;
|
||||
users.users.${account.name}.hashedPasswordFile = config.sops.secrets.hashed-password.path;
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user