nixos/secrets: don't manage root user secrets by default

1 files changed, 1 insertions, 3 deletions

diff --git a/modules/nixos/traits/secrets.nix b/modules/nixos/traits/secrets.nix
index d7f4e60..bd685ef 100644
--- a/modules/nixos/traits/secrets.nix
+++ b/modules/nixos/traits/secrets.nix
@@ -12,9 +12,7 @@ in
   options.traits.secrets = {
     enable = lib.mkEnableOption "secrets management";
 
-    rootUser = lib.mkEnableOption "manage secrets for root user" // {
-      default = true;
-    };
+    rootUser = lib.mkEnableOption "manage secrets for root user";
 
     hostUser = lib.mkEnableOption "manager secrets for host user (see `profiles.server.hostUser`)" // {
       default = config.profiles.server.hostUser;