feat(servers): set passwords using hashedPasswordFile.

modules/servers/general/default.nix

@@ -6,5 +6,6 @@
     ./secrets.nix
     ./podman.nix
     ./additional-pkgs.nix
+    ./root.nix
   ];
 }

modules/servers/general/root.nix

@@ -0,0 +1,5 @@
+{config, ...}: {
+  users.users.root = {
+    hashedPasswordFile = "${config.age.secrets.root-passwd.path}";
+  };
+}

modules/servers/general/secrets.nix

@@ -5,6 +5,12 @@
         file = ../../../secrets/traefik.age;
         owner = "traefik";
       };
+      crony-passwd = {
+        file = ../../../secrets/crony-passwd-servers.age;
+      };
+      root-passwd = {
+        file = ../../../secrets/root-passwd.age;
+      };
     };
   };
 }

modules/servers/general/user.nix

@@ -1,6 +1,6 @@
-{...}: {
+{config, ...}: {
   users.users.crony = {
-    password = "whatever i will change it right away";
+    hashedPasswordFile = "${config.age.secrets.crony-passwd.path}";
     isNormalUser = true;
     description = "crony";
     extraGroups = [