aboutsummaryrefslogtreecommitdiff
path: root/modules/user
diff options
context:
space:
mode:
Diffstat (limited to 'modules/user')
-rw-r--r--modules/user/nixos/default.nix4
-rw-r--r--modules/user/options.nix10
2 files changed, 4 insertions, 10 deletions
diff --git a/modules/user/nixos/default.nix b/modules/user/nixos/default.nix
index 05afe37..0257198 100644
--- a/modules/user/nixos/default.nix
+++ b/modules/user/nixos/default.nix
@@ -1,5 +1,6 @@
{
config,
+ hostname,
lib,
...
}: let
@@ -9,9 +10,10 @@ in {
isNormalUser = true;
description = cfg.name;
extraGroups = ["networkmanager" "pipewire" "disks" "input" "video" "dialout" "kvm"] ++ (lib.optional cfg.isAdmin "wheel");
- hashedPassword = cfg.password;
+ hashedPasswordFile = config.age.secrets."${cfg.name}@${hostname}-passwd".path;
};
security.sudo-rs.enable = true;
+ services.userborn.enable = true;
time.timeZone = "America/Chicago";
diff --git a/modules/user/options.nix b/modules/user/options.nix
index f5c7a5f..1024494 100644
--- a/modules/user/options.nix
+++ b/modules/user/options.nix
@@ -1,8 +1,4 @@
-{
- config,
- lib,
- ...
-}: let
+{lib, ...}: let
inherit (lib) mkOption types;
in {
options = {
@@ -10,10 +6,6 @@ in {
name = mkOption {
type = types.str;
};
- password = mkOption {
- type = types.str;
- description = "hashed password for user";
- };
isAdmin = mkOption {
type = types.bool;
default = true;