33d80a34bb
Set mutableUsers = false to ensure password is managed declaratively via hashedPasswordFile. Updated password hash in SOPS secrets. Also adds nixos-config-researcher agent for Claude Code. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
19 lines
377 B
Nix
19 lines
377 B
Nix
{
|
|
pkgs,
|
|
myConfig,
|
|
config,
|
|
...
|
|
}: {
|
|
users = {
|
|
mutableUsers = false;
|
|
users = {
|
|
${myConfig.nixos.username} = {
|
|
isNormalUser = true;
|
|
extraGroups = ["wheel" "networkmanager" "input" "video"];
|
|
hashedPasswordFile = config.sops.secrets.default_password.path; # FIXME: may not work!
|
|
useDefaultShell = true;
|
|
};
|
|
};
|
|
};
|
|
}
|