configure Password via Colmena

This commit is contained in:
Clara Dautermann 2025-04-15 18:49:03 +02:00
parent 05a89fe0f2
commit 13a9c9f13e
Signed by: clara
GPG key ID: 223391B52FAD4463
4 changed files with 62 additions and 4 deletions

View file

@ -1,9 +1,18 @@
{ modulesPath, pkgs, lib, inputs, ... }: {
{ modulesPath, pkgs, lib, inputs, config, ... }: {
imports = [
(modulesPath + "/virtualisation/proxmox-lxc.nix")
inputs.sops-nix.nixosModules.sops
];
# set up secret key
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = ../secrets/all/secrets.yaml;
secrets.initial_password_clara = {
neededForUsers = true;
};
};
time.timeZone = "Europe/Berlin";
# we want at least a possibility to download stuff, monitor activity and sudo
@ -25,7 +34,7 @@
# default user with sudo
users.users.clara = {
isNormalUser = true;
initialPassword = "123456";
hashedPasswordFile = config.sops.secrets.initial_password_clara.path;
extraGroups = [ "sudo" "wheel" ];
shell = pkgs.zsh;
};