nixos: remove root password

1 files changed, 2 insertions, 2 deletions

diff --git a/modules/nixos/base/users.nix b/modules/nixos/base/users.nix
index 8a554f5..507a82a 100644
--- a/modules/nixos/base/users.nix
+++ b/modules/nixos/base/users.nix
@@ -11,7 +11,7 @@ in {
     enable = lib.mkEnableOption "base user configurations" // {default = true;};
 
     defaultRoot = {
-      enable = lib.mkEnableOption "default root user configuration" // {default = true;};
+      enable = lib.mkEnableOption "default root user configuration" // {default = false;};
       manageSecrets =
         lib.mkEnableOption "automatic secrets management"
         // {
@@ -37,7 +37,7 @@ in {
         };
       })
 
-      (lib.mkIf cfg.defaultRoot.manageSecrets {
+      (lib.mkIf (cfg.defaultRoot.enable && cfg.defaultRoot.manageSecrets) {
         age.secrets = {
           rootPassword.file = secretsDir + "/rootPassword.age";
         };