Toast/nix-stuff
1
0
Fork 0
Code Issues Pull requests Projects 1 Wiki Activity

Compare commits

base: Toast:27babd819ce35e79c2bed2a1c8635d5ec00df935
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05
...
compare: Toast:b5a8a9a5450c5d5bd69690b93ab3cebc733cc77e
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05

2 commits
27babd819c ... b5a8a9a545

Author SHA1 Message Date
Toast
b5a8a9a545 Common; disable mutable users 2025-12-19 12:20:35 +01:00
Toast
6365f7b4f3 Common: set toast password 2025-12-19 12:14:24 +01:00
2 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -524,11 +524,11 @@
"secrets": { "secrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1765212399, "lastModified": 1766142512,
"narHash": "sha256-QEjuaK17HddWr0ZBRhsg3nt4QhSxQZ1i9YO2ctV045c=", "narHash": "sha256-h/vlxWqgEGbnrTWAFW+TCTJSQ1mAlkWyMM3HyHeqpF4=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "43c8697580bb389aea565459802c3b9827aa2d3d", "rev": "b87ab22fedeb4187669f1e546f18fb7d781721ba",
"revCount": 38, "revCount": 40,
"type": "git", "type": "git",
"url": "ssh://forgejo@git.toast003.xyz:4222/Toast/nix-secrets" "url": "ssh://forgejo@git.toast003.xyz:4222/Toast/nix-secrets"
}, },

6
roles/common/configuration.nix
View file

@ -90,10 +90,12 @@
}; };
# Set up my user # Set up my user
users.mutableUsers = false;
users.users.toast = { users.users.toast = {
isNormalUser = true; isNormalUser = true;
description = "Toast"; description = "Toast";
extraGroups = ["wheel"]; extraGroups = ["wheel"];
hashedPasswordFile = config.sops.secrets.toast.path;
}; };
# Set up time zone. # Set up time zone.
@ -162,6 +164,10 @@
sops = { sops = {
age.sshKeyPaths = ["/persist/id_host"]; age.sshKeyPaths = ["/persist/id_host"];
defaultSopsFile = "${flakeSelf.inputs.secrets}/${config.networking.hostName}.yaml"; defaultSopsFile = "${flakeSelf.inputs.secrets}/${config.networking.hostName}.yaml";
secrets.toast = {
sopsFile = "${flakeSelf.inputs.secrets}/passwd.yaml";
neededForUsers = true;
};
}; };
catppuccin.grub.enable = true; catppuccin.grub.enable = true;