ragusa-it/nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Pass password hash path via flake

Browse Source 
Co-authored-by: ragusa-it <196988693+ragusa-it@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-01 20:56:31 +00:00
parent 4370c6a22d
commit f95c64168c
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -63,7 +63,7 @@ Defaults are set in `flake.nix` and used across modules. Update them there:
| `time.timeZone` | `America/New_York` | `modules/common.nix` | | `time.timeZone` | `America/New_York` | `modules/common.nix` |
| `i18n.defaultLocale` | `en_US.UTF-8` | `modules/common.nix` | | `i18n.defaultLocale` | `en_US.UTF-8` | `modules/common.nix` |
Also rename the default `hosts/atlas/` directory to match your actual hostname, and ensure the same hostname is set in `flake.nix`. Also rename the default `hosts/atlas/` directory to match your actual hostname, and ensure the same hostname is set in `flake.nix` (the flake uses it to locate `hosts/<hostname>/hardware-configuration.nix`).
### 3. Stage Files in Git ### 3. Stage Files in Git

3
flake.nix
View File

@@ -41,7 +41,8 @@
username = "pinj"; username = "pinj";
lib = nixpkgs.lib; lib = nixpkgs.lib;
hostConfig = ./hosts + "/${hostname}/hardware-configuration.nix"; hostConfig = ./hosts + "/${hostname}/hardware-configuration.nix";
specialArgs = { inherit inputs system hostname username; }; passwordHashPath = "/etc/nixos/secrets/${username}/password.hash";
specialArgs = { inherit inputs system hostname username passwordHashPath; };
# Verify mango flake exports the expected module # Verify mango flake exports the expected module
mangoModule = assert lib.hasAttrByPath [ "nixosModules" "mango" ] mango; mangoModule = assert lib.hasAttrByPath [ "nixosModules" "mango" ] mango;

4
modules/common.nix
View File

@@ -1,4 +1,4 @@
{ config, pkgs, inputs, system, hostname, username, ... }: { config, pkgs, inputs, system, hostname, username, passwordHashPath, ... }:
{ {
assertions = [ assertions = [
@@ -118,7 +118,7 @@
extraGroups = [ "wheel" "networkmanager" "video" "seat" ]; extraGroups = [ "wheel" "networkmanager" "video" "seat" ];
# IMPORTANT: Generate a password hash with: mkpasswd -m sha-512 # IMPORTANT: Generate a password hash with: mkpasswd -m sha-512
# Save it to the path below (ensure permissions are 600) # Save it to the path below (ensure permissions are 600)
hashedPasswordFile = "/etc/nixos/secrets/${username}/password.hash"; hashedPasswordFile = passwordHashPath;
packages = with pkgs; [ packages = with pkgs; [
# -- Noctalia Shell -- # -- Noctalia Shell --
inputs.quickshell.packages.${system}.default inputs.quickshell.packages.${system}.default