Make user credentials ready to be configured through sops

arunoruto · Jul 19, 2024 · 220f42a · 220f42a
1 parent 32a3222
commit 220f42a
Showing 1 changed file with 22 additions and 15 deletions.
diff --git a/nixos/user.nix b/nixos/user.nix
@@ -1,27 +1,34 @@
 {
   inputs,
+  config,
   pkgs,
   lib,
   username,
   theme,
   image,
   ...
 }: {
-  users.users.${username} = {
-    isNormalUser = true;
-    shell = pkgs.zsh;
-    description = "Mirza";
-    extraGroups = [
-      "dialout"
-      "networkmanager"
-      "wheel"
-      "scanner"
-      "lp"
-      "pipewire"
-      "audio"
-      "video"
-      "render"
-    ];
+  sops.secrets."passwords/${username}".neededForUsers = true;
+
+  users = {
+    # mutableUsers = false;
+    users.${username} = {
+      isNormalUser = true;
+      # hashedPasswordFile = config.sops.secrets."passwords/${username}".path;
+      shell = pkgs.zsh;
+      description = "Mirza";
+      extraGroups = [
+        "dialout"
+        "networkmanager"
+        "wheel"
+        "scanner"
+        "lp"
+        "pipewire"
+        "audio"
+        "video"
+        "render"
+      ];
+    };
   };
 
   programs.zsh.enable = true;