From 233e5fb7d43a0736857ee6b9f74967f03b73837c Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Tue, 10 Feb 2026 22:27:11 +0100
Subject: ...

---
 os/core/users.nix | 36 ++++++++++++++++++++++--------------
 1 file changed, 22 insertions(+), 14 deletions(-)

(limited to 'os/core/users.nix')

diff --git a/os/core/users.nix b/os/core/users.nix
index 74a8fc4..03eff8a 100644
--- a/os/core/users.nix
+++ b/os/core/users.nix
@@ -12,21 +12,29 @@ in
   options.os.core.users.enable = lib.mkEnableOption "enables user accounts";
   config = lib.mkIf cfg.enable {
     programs.fish.enable = true;
-    users.users.${username} = {
-      isNormalUser = true;
-      shell = pkgs.fish;
-      extraGroups = lib.mkMerge [
-        [ "wheel" ]
+    users = {
+      mutableUsers = false;
 
-        (lib.mkIf (config.os.core.drivers.amd.enable or false) [
-          "video"
-          "render"
-        ])
-        (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ])
-        (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ])
-        (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ])
-        (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ])
-      ];
+      users = {
+        "${username}" = {
+          isNormalUser = true;
+          hashedPasswordFile = config.sops.secrets.user_password.path;
+          shell = pkgs.fish;
+          extraGroups = lib.mkMerge [
+            [ "wheel" ]
+
+            (lib.mkIf (config.os.core.drivers.amd.enable or false) [
+              "video"
+              "render"
+            ])
+            (lib.mkIf (config.os.core.network.enable or false) [ "networkmanager" ])
+            (lib.mkIf (config.os.srv.virtualization.enable or false) [ "libvirtd" ])
+            (lib.mkIf (config.os.srv.docker.enable or false) [ "docker" ])
+            (lib.mkIf (config.os.srv.autoclicker.enable or false) [ "input" ])
+          ];
+        };
+        root.hashedPasswordFile = config.sops.secrets.root_password.path;
+      };
     };
   };
 }
-- 
cgit v1.3