DuN0z/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add: encrypted password for dunoz user

Browse source
This commit is contained in:
DuN0z 2025-10-30 08:19:01 +01:00
parent 1151aaa3cb
commit 55c3398a43
3 changed files with 13 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
hosts/penduick/configuration.nix
View file

@ -29,12 +29,17 @@ in {
PasswordAuthentication = true; PasswordAuthentication = true;
}; };
users.users.dunoz = { age.identityPaths = [ "/etc/agenix/penduick.key" ];
age.secrets."dunoz-password-penduick".file = ../../secrets/dunoz-password-penduick.age;
users= {
mutableUsers = false ;
users.dunoz = {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "wheel" "networkmanager" ]; extraGroups = [ "wheel" "networkmanager" ];
initialPassword = "temp"; hashedPasswordFile = config.age.secrets."dunoz-password-penduick".path;
shell = pkgs.zsh; shell = pkgs.zsh;
}; };
};
home-manager = { home-manager = {
useGlobalPkgs = true ; useGlobalPkgs = true ;
@ -44,6 +49,7 @@ in {
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
git htop wget curl git htop wget curl
neovim neovim
age ssh-to-age
]; ];

BIN
secrets/dunoz-password-penduick.age Normal file
View file

Binary file not shown.

2
secrets/secrets.nix
View file

@ -1,8 +1,10 @@
let let
serveur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVxB7usThGHf8cuSPE4sjdqSaPNlwWAZPEo1wUgHz6 root@terre-neuvas"; serveur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVxB7usThGHf8cuSPE4sjdqSaPNlwWAZPEo1wUgHz6 root@terre-neuvas";
admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxranFaz3jRfvYE2M6FvRUWjzviIWjWd1mucgKeuSK2 lomig@nixos"; admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxranFaz3jRfvYE2M6FvRUWjzviIWjWd1mucgKeuSK2 lomig@nixos";
penduick = "age1rnyey8shjxyaq43dzlnhtfkcm3ra4hy3ygh6c46w4xmr7fe9fe3s00nh2r";
in in
{ {
"goaccess-password.age".publicKeys = [ serveur admin ]; "goaccess-password.age".publicKeys = [ serveur admin ];
"dunoz-password-penduick.age".publicKeys = [ penduick ];
} }