feat(desktop): set user password using hashedPasswordFile.

hosts/nixos/configuration.nix

@@ -1,5 +1,6 @@
 {
   inputs,
+  config,
   pkgs,
   ...
 }: {
@@ -106,9 +107,14 @@
   users.users.crony = {
     isNormalUser = true;
     description = "Crony";
+    hashedPasswordFile = "${config.age.secrets.crony-passwd.path}";
     extraGroups = ["networkmanager" "wheel" "video" "input" "audio" "gamemode" "seat"];
   };
 
+  users.users.root.hashedPasswordFile = "${config.age.secrets.root-passwd.path}";
+
+  users.mutableUsers = false;
+
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
 

hosts/ymir/configuration.nix

@@ -1,5 +1,6 @@
 {
   inputs,
+  config,
   pkgs,
   ...
 }: {
@@ -106,9 +107,14 @@
   users.users.crony = {
     isNormalUser = true;
     description = "Crony";
+    hashedPasswordFile = "${config.age.secrets.crony-passwd.path}";
     extraGroups = ["networkmanager" "wheel" "video" "input" "audio" "gamemode" "seat"];
   };
 
+  users.users.root.hashedPasswordFile = "${config.age.secrets.root-passwd.path}";
+
+  users.mutableUsers = false;
+
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
 

modules/linux/nixos/secrets.nix

@@ -4,6 +4,12 @@
       wg-desktop = {
         file = ../../../secrets/wg-desktop.age;
       };
+      crony-passwd = {
+        file = ../../../secrets/crony-passwd-desktop.age;
+      };
+      root-passwd = {
+        file = ../../../secrets/root-passwd.age;
+      };
     };
     identityPaths = ["/home/crony/.ssh/main"];
   };

secrets/crony-passwd-desktop.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 2P4nKw wpAhdG6VhwlJ3Kh+Sy1Z6xQpe+J4MNwRUh74NOwUoRk
+1oRFTsgbYtR8lShHzgH02b/TKAklbpbNK2uhw/idUY0
+-> ssh-ed25519 6+hQpQ 0JPdpTv1Nks5FP4CEDOK72Ve63QvXzAuY1EIb3+jhkw
+vJ+Nn/uSvSEBJB9eo16aqDdsh6/sI53qYqRXjZLeKKY
+-> ssh-ed25519 l/ODWA dPM/X6DMl8SgDdtZfbw226Z3Cr+xPLDshkdsaP3pwH8
+DVVs50NRfedYV0gJoPOl3BrGGh0govkgDrxVChT4Vfo
+-> ssh-ed25519 7+5K3Q PrY2tbECXEvIZeFp/yXkPKjktw1jMwZNaslR20QywBk
+CzGkEn4yaCSRego9R9DkF3Hf2n+7ZWtnbFa4YAQfERM
+-> ssh-ed25519 Ow0TGw +v8hrZsSASiA8GDHSjHAdcc6zMHFmJ8HZ3kI8zKhsn0
+OwsfohDZBWUH4x2oJxNYGT8m5O8cONUqAxYzjEmhsNs
+-> ssh-ed25519 cEINMA SrANNo6f42K0sH54ZG2f9CQGF6OYRNMV2Rrp4ghMTi4
+PiuVeZWl4BLjtHmmyZRQfPqP5cjJS3Ick3iU6Sqmdw0
+-> ssh-ed25519 fd/ZLQ EK0Iwvyu2t+AFCyW6GoUnDlwRpat2DcOXzIDCG5Q7nA
+UhtZmaYdspjfmf0y9YoTySx/dB2wiZPKcRlvBxB+Vxk
+--- TUmKueenk23R7yPRBXIkz4Bc36SJoh6ILhiWn2Lg900
+Kﾓｴﾌ^<5E>ﾀ琇ﾔ俵寤蘯L
哩]雖{.<05>ﾖ{ｺVｺ
/p蔔
満<<3C>附-聶lｲ<6C><EFBDB2>	ﾗvﾊｺｧ0`ﾉｳp<EFBDB3>軫絜ｫco<63>-N)usVｸ､嫺<EFBDA4>k暼V.;ﾋtt