use agenix

2025-12-30 17:45:01 +01:00
parent e39747ae2e
commit 0468cf2621
7 changed files with 31 additions and 5 deletions
--- a/machines/173-249-5-230/configuration.nix
+++ b/machines/173-249-5-230/configuration.nix
@@ -1,4 +1,9 @@
-{machine, ...}: {
+{
+  config,
+  machine,
+  ...
+}: {
+  age.secrets.secret1.file = ../../secrets/secret1.age;
  boot.tmp.cleanOnBoot = true;
  boot.loader.grub.devices = ["nodev"];
  environment.persistence."/nix/persist" = {
@@ -66,7 +71,7 @@
  users.users."mtgmonkey" = {
    isNormalUser = true;
    description = "mtgmonkey";
-    initialPassword = "password";
+    passwordFile = builtins.toString config.age.secrets.secret1.path;
    extraGroups = ["wheel"];
    openssh.authorizedKeys.keys = machine.pub-keys.ssh;
  };