summaryrefslogtreecommitdiff
path: root/modules/nixos
diff options
context:
space:
mode:
authorseth <[email protected]>2023-09-15 22:13:07 -0400
committerseth <[email protected]>2023-09-15 22:13:07 -0400
commit82c805c8e2d784c92851875a7ef025bf7560f2bf (patch)
treee9e380cbf095b26f891185204f62ce05009b420e /modules/nixos
parentb01049f717d91ded454aeda9d095161b0baf2c84 (diff)
modules/base+users/seth: adopt hashedPasswordFile
Diffstat (limited to 'modules/nixos')
-rw-r--r--modules/nixos/base/root.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/modules/nixos/base/root.nix b/modules/nixos/base/root.nix
index cedd147..ecc5203 100644
--- a/modules/nixos/base/root.nix
+++ b/modules/nixos/base/root.nix
@@ -5,6 +5,13 @@
}: let
cfg = config.base.defaultRoot;
inherit (lib) mkDefault mkEnableOption mkIf;
+
+ # yes this is a bad way to detect which option should be used (or exists)
+ # but i'm lazy. please do not copy this
+ passwordFile =
+ if lib.versionAtLeast config.system.stateVersion "23.11"
+ then "hashedPasswordFile"
+ else "passwordFile";
in {
options.base.defaultRoot.enable = mkEnableOption "default root user";
@@ -13,7 +20,7 @@ in {
home = mkDefault "/root";
uid = mkDefault config.ids.uids.root;
group = mkDefault "root";
- passwordFile = mkDefault config.age.secrets.rootPassword.path;
+ "${passwordFile}" = mkDefault config.age.secrets.rootPassword.path;
};
};
}