feat(nix): add sops for secrets

This commit is contained in:
stitchy 2025-10-29 22:36:06 -07:00
parent 89232a7cd1
commit d04ba5d01a
Signed by: stitchy
SSH key fingerprint: SHA256:yz2SoxdnY67tfY5Jzb0f2v8f5W3o/IF359kbcquWip8
5 changed files with 75 additions and 3 deletions

View file

@ -54,11 +54,16 @@
xserver.enable = true;
};
sops.secrets."password-hash/stitchynyan" = {
neededForUsers = true;
sopsFile = ../../secrets/stitchynyan/secrets.yaml;
};
users.users.stitchynyan = {
description = "Personal user";
extraGroups = [ "audio" "dialout" "docker" "kvm" "libvirtd" "networkmanager" "plugdev" "wireshark" "wheel" ];
home = "/home/stitchynyan";
initialHashedPassword = "$y$j9T$rvySCWHYE4AO4A9J0Vf20.$x5hpBNsOWovQFtNfFUIt17OAH5MJFwFBGjxbaEIagJ3";
hashedPasswordFile = config.sops.secrets."password-hash/stitchynyan".path;
isNormalUser = true;
shell = pkgs.zsh;
};