diff options
Diffstat (limited to 'modules/nixos/traits/users/seth.nix')
| -rw-r--r-- | modules/nixos/traits/users/seth.nix | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/modules/nixos/traits/users/seth.nix b/modules/nixos/traits/users/seth.nix new file mode 100644 index 0000000..9ebb6c8 --- /dev/null +++ b/modules/nixos/traits/users/seth.nix @@ -0,0 +1,28 @@ +{ + config, + lib, + secretsDir, + ... +}: let + cfg = config.traits.users.seth; +in { + options.traits.users.seth = { + manageSecrets = + lib.mkEnableOption "automatic secrets management" + // { + default = config.traits.secrets.enable; + }; + }; + + config = lib.mkMerge [ + (lib.mkIf (cfg.enable && cfg.manageSecrets) { + age.secrets = { + sethPassword.file = secretsDir + "/sethPassword.age"; + }; + + users.users.seth = { + hashedPasswordFile = lib.mkDefault config.age.secrets.sethPassword.path; + }; + }) + ]; +} |
