clan/clan-core
11
2
Fork 13
Code Issues 91 Pull Requests 5 Actions Packages Projects 1 Releases Wiki Activity

rework root-password module

Browse Source
This commit is contained in:
Jörg Thalheim 2024-04-12 13:37:33 +02:00 committed by Mic92
parent 895f6fbc8a
commit 3f8ab35a19
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
clanModules/root-password.nix
View File

@ -1,11 +1,12 @@
{ pkgs, config, ... }:
{
users.mutableUsers = false;
users.extraUsers.root.hashedPasswordFile = "/run/secrets-for-users/passwordHash";
sops.secrets."${config.clanCore.machineName}-passwordHash".neededForUsers = true;
clanCore.facts.services.password = {
users.users.root.hashedPasswordFile =
config.clanCore.facts.services.root-password.secret.password-hash.path;
sops.secrets."${config.clanCore.machineName}-password-hash".neededForUsers = true;
clanCore.facts.services.root-password = {
secret.password = { };
secret.passwordHash = { };
secret.password-hash = { };
generator.path = with pkgs; [
coreutils
xkcdpass
@ -13,7 +14,7 @@
];
generator.script = ''
xkcdpass --numwords 3 --delimiter - --count 1 > $secrets/password
cat $secrets/password | mkpasswd -s -m sha-512 > $secrets/passwordHash
cat $secrets/password | mkpasswd -s -m sha-512 > $secrets/password-hash
'';
};
}