...

1 files changed, 22 insertions, 14 deletions

diff --git a/os/core/users.nix b/os/core/users.nix
index 74a8fc4..03eff8a 100644
--- a/os/core/users.nix
+++ b/os/core/users.nix
@@ -12,21 +12,29 @@ in
   options.os.core.users.enable = lib.mkEnableOption "enables user accounts";
   config = lib.mkIf cfg.enable {
     programs.fish.enable = true;
-    users.users.${username} = {
-      isNormalUser = true;
-      shell = pkgs.fish;
-      extraGroups = lib.mkMerge [
-        [ "wheel" ]
+    users = {
+      mutableUsers = false;
 
-        (lib.mkIf (config.os.core.drivers.amd.enable or false) [
-          "video"
-          "render"
-        ])
-        (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ])
-        (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ])
-        (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ])
-        (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ])
-      ];
+      users = {
+        "${username}" = {
+          isNormalUser = true;
+          hashedPasswordFile = config.sops.secrets.user_password.path;
+          shell = pkgs.fish;
+          extraGroups = lib.mkMerge [
+            [ "wheel" ]
+
+            (lib.mkIf (config.os.core.drivers.amd.enable or false) [
+              "video"
+              "render"
+            ])
+            (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ])
+            (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ])
+            (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ])
+            (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ])
+          ];
+        };
+        root.hashedPasswordFile = config.sops.secrets.root_password.path;
+      };
     };
   };
 }