Use agenix for password

This commit is contained in:
Henry Hiles 2025-03-22 17:47:21 -04:00
parent ec1251c8f7
commit 9a8bf34a56
6 changed files with 23 additions and 86 deletions

77
flake.lock generated
View file

@ -160,24 +160,6 @@
} }
}, },
"flake-parts": { "flake-parts": {
"inputs": {
"nixpkgs-lib": "nixpkgs-lib"
},
"locked": {
"lastModified": 1741352980,
"narHash": "sha256-+u2UunDA4Cl5Fci3m7S643HzKmIDAe+fiXrLqYsR2fs=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "f4330d22f1c5d2ba72d3d22df5597d123fdb60a9",
"type": "github"
},
"original": {
"owner": "hercules-ci",
"repo": "flake-parts",
"type": "github"
}
},
"flake-parts_2": {
"inputs": { "inputs": {
"nixpkgs-lib": [ "nixpkgs-lib": [
"stylix", "stylix",
@ -363,57 +345,7 @@
"type": "github" "type": "github"
} }
}, },
"nix-gaming": {
"inputs": {
"flake-parts": "flake-parts",
"nixpkgs": "nixpkgs"
},
"locked": {
"lastModified": 1742262357,
"narHash": "sha256-6JGR5I4cuFFun3AJKPnMPz6PKUPywIH+AFYROUFRvYQ=",
"owner": "fufexan",
"repo": "nix-gaming",
"rev": "53eda8bba79a2c28782734bca51d70ecffb82d74",
"type": "github"
},
"original": {
"owner": "fufexan",
"repo": "nix-gaming",
"type": "github"
}
},
"nixpkgs": { "nixpkgs": {
"locked": {
"lastModified": 1741865919,
"narHash": "sha256-4thdbnP6dlbdq+qZWTsm4ffAwoS8Tiq1YResB+RP6WE=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "573c650e8a14b2faa0041645ab18aed7e60f0c9a",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixpkgs-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"nixpkgs-lib": {
"locked": {
"lastModified": 1740877520,
"narHash": "sha256-oiwv/ZK/2FhGxrCkQkB83i7GnWXPPLzoqFHpDD3uYpk=",
"owner": "nix-community",
"repo": "nixpkgs.lib",
"rev": "147dee35aab2193b174e4c0868bd80ead5ce755c",
"type": "github"
},
"original": {
"owner": "nix-community",
"repo": "nixpkgs.lib",
"type": "github"
}
},
"nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1742288794, "lastModified": 1742288794,
"narHash": "sha256-Txwa5uO+qpQXrNG4eumPSD+hHzzYi/CdaM80M9XRLCo=", "narHash": "sha256-Txwa5uO+qpQXrNG4eumPSD+hHzzYi/CdaM80M9XRLCo=",
@ -429,7 +361,7 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_3": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1741513245, "lastModified": 1741513245,
"narHash": "sha256-7rTAMNTY1xoBwz0h7ZMtEcd8LELk9R5TzBPoHuhNSCk=", "narHash": "sha256-7rTAMNTY1xoBwz0h7ZMtEcd8LELk9R5TzBPoHuhNSCk=",
@ -447,7 +379,7 @@
}, },
"nur": { "nur": {
"inputs": { "inputs": {
"flake-parts": "flake-parts_2", "flake-parts": "flake-parts",
"nixpkgs": [ "nixpkgs": [
"stylix", "stylix",
"nixpkgs" "nixpkgs"
@ -494,8 +426,7 @@
"agenix": "agenix", "agenix": "agenix",
"firefox-gnome-theme": "firefox-gnome-theme", "firefox-gnome-theme": "firefox-gnome-theme",
"home-manager": "home-manager_2", "home-manager": "home-manager_2",
"nix-gaming": "nix-gaming", "nixpkgs": "nixpkgs",
"nixpkgs": "nixpkgs_2",
"programsdb": "programsdb", "programsdb": "programsdb",
"stylix": "stylix", "stylix": "stylix",
"wrapper-manager": "wrapper-manager" "wrapper-manager": "wrapper-manager"
@ -513,7 +444,7 @@
"git-hooks": "git-hooks", "git-hooks": "git-hooks",
"gnome-shell": "gnome-shell", "gnome-shell": "gnome-shell",
"home-manager": "home-manager_3", "home-manager": "home-manager_3",
"nixpkgs": "nixpkgs_3", "nixpkgs": "nixpkgs_2",
"nur": "nur", "nur": "nur",
"systems": "systems_2", "systems": "systems_2",
"tinted-foot": "tinted-foot", "tinted-foot": "tinted-foot",

View file

@ -8,7 +8,6 @@
support32Bit = true; support32Bit = true;
}; };
pulse.enable = true; pulse.enable = true;
lowLatency.enable = true;
}; };
}; };
} }

View file

@ -1,7 +0,0 @@
{
users.users.quadradical = {
isNormalUser = true;
description = "QuadRadical";
extraGroups = ["wheel"];
};
}

14
modules/common/users.nix Normal file
View file

@ -0,0 +1,14 @@
{config, ...}: {
users = {
mutableUsers = false;
users = {
root.hashedPasswordFile = config.age.secrets."password.age".path;
quadradical = {
isNormalUser = true;
hashedPasswordFile = config.age.secrets."password.age".path;
description = "QuadRadical";
extraGroups = ["wheel"];
};
};
};
}

View file

@ -1,5 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 VKQUdQ V568wRYo550DS5oiEYb/19nR1mwz4XIBlkbuqKb9YiI
hh/6uj6bfMqEvWaWD+kqwXiuyKaXvn9XJF4T6EICCrg
--- fP66DGtL4VsWF3L8VCRn3lxfd0DQJqupcJvq0QyeOrk
1aˆÿýœ=Àø¸_ùz–ìxcÐnat a ÷<>ÕŸÆÒ

5
secrets/password.age Normal file
View file

@ -0,0 +1,5 @@
age-encryption.org/v1
-> ssh-ed25519 VKQUdQ bgv7ItuDld87O5eehkMRFoAhjl1xDJ9qIKxjDfVOBH4
ykJ5KMS+U3KJnbiiK50QJXUYfcvVN0xACo9cU2o0mYc
--- tDNTCrniH/S5YJ0JtM0Z62eBuiK5Ki97kWFYjv+w2+k
°!˜Ý(r³Ò´¹†«MQq`Ï*…õß-b0¥àhþ{ÞÅåɸ¾)<29>¯£ŒXuƒÝWºµ Ô½ôÄeHACjyI0IŒE £¯P@Æ_š‡H[BËp¦Ï±?6ž|þHl7†RNR©ÀÌ»85ã¸<C3A3>Y6cèàí1­ÎòâÈ:Æt^1lô