use agenix for passwords

1 files changed, 13 insertions, 0 deletions

diff --git a/hosts/default.nix b/hosts/default.nix
index 8aff79e..8aa7324 100644
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -5,8 +5,21 @@ with inputs; let
     stateVersion = "23.05";
     pkgs = nixpkgsUnstable;
     modules = with inputs; [
+      agenix.nixosModules.default
       home-manager.nixosModules.home-manager
       nur.nixosModules.nur
+      {
+        services.openssh = {
+          enable = true;
+        };
+        age = {
+          identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+          secrets = {
+            rootPassword.file = ../secrets/rootPassword.age;
+            sethPassword.file = ../secrets/sethPassword.age;
+          };
+        };
+      }
     ];
   };
 in {