diff options
Diffstat (limited to 'os/core/users.nix')
| -rw-r--r-- | os/core/users.nix | 36 |
1 files changed, 22 insertions, 14 deletions
diff --git a/os/core/users.nix b/os/core/users.nix index 74a8fc4..03eff8a 100644 --- a/os/core/users.nix +++ b/os/core/users.nix @@ -12,21 +12,29 @@ in options.os.core.users.enable = lib.mkEnableOption "enables user accounts"; config = lib.mkIf cfg.enable { programs.fish.enable = true; - users.users.${username} = { - isNormalUser = true; - shell = pkgs.fish; - extraGroups = lib.mkMerge [ - [ "wheel" ] + users = { + mutableUsers = false; - (lib.mkIf (config.os.core.drivers.amd.enable or false) [ - "video" - "render" - ]) - (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ]) - (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ]) - (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ]) - (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ]) - ]; + users = { + "${username}" = { + isNormalUser = true; + hashedPasswordFile = config.sops.secrets.user_password.path; + shell = pkgs.fish; + extraGroups = lib.mkMerge [ + [ "wheel" ] + + (lib.mkIf (config.os.core.drivers.amd.enable or false) [ + "video" + "render" + ]) + (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ]) + (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ]) + (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ]) + (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ]) + ]; + }; + root.hashedPasswordFile = config.sops.secrets.root_password.path; + }; }; }; } |