add password to users

moduler/base.nix

@@ -6,6 +6,9 @@
   ...
 }:
 {
+  sops.defaultSopsFile = ../secrets/sops.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
   nixpkgs = {
     config = {
       allowUnfree = true;
@@ -49,11 +52,8 @@
       efi = {
         canTouchEfiVariables = true;
       };
-      systemd-boot.enable = true;
-      grub = {
-        efiSupport = true;
-        efiInstallAsRemovable = true;
-        device = "nodev";
+      systemd-boot = {
+        enable = true;
       };
     };
   };
@@ -67,10 +67,19 @@
       		fi
       	  '';
   };
-  environment.etc = lib.mapAttrs' (name: value: {
-    name = "nix/path/${name}";
-    value.source = value.flake;
-  }) config.nix.registry;
+  environment = {
+    etc = lib.mapAttrs' (name: value: {
+      name = "nix/path/${name}";
+      value.source = value.flake;
+    }) config.nix.registry;
+
+    sessionVariables = {
+      EDITOR = "nvim";
+      VISUAL = "nvim";
+      TERM = "xterm-256color";
+    };
+
+  };
 
   virtualisation = {
     docker = {
@@ -79,12 +88,6 @@
     };
   };
 
-  environment.sessionVariables = {
-    EDITOR = "nvim";
-    VISUAL = "nvim";
-    TERM = "xterm-256color";
-  };
-
   time.timeZone = "Europe/Stockholm";
 
   fonts.packages = with pkgs; [
@@ -108,12 +111,9 @@
 
   console.keyMap = "sv-latin1";
 
-  programs.bat = {
-    enable = true;
-  };
-
   services.tailscale.enable = true;
   networking = {
+    nftables.enable = true;
     networkmanager.enable = true;
     firewall = {
       checkReversePath = "loose";

moduler/users.nix

@@ -4,11 +4,13 @@
   ...
 }:
 {
+  sops.secrets.user-password = { };
   users = {
     defaultUserShell = pkgs.bash;
+    mutableUsers = false;
     users = {
       fw = {
-        initialPassword = "password";
+        hashedPasswordFile = config.sops.secrets.user-password.path;
         isNormalUser = true;
         description = "Fredrik Wastring";
         extraGroups = [
@@ -20,7 +22,7 @@
         ];
         openssh.authorizedKeys = {
           keys = [
-			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFpJBGPIfPB1BwSG7aoKqwfccyZSaU7J3xpJ8behMp9N fw@core"
+            "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFpJBGPIfPB1BwSG7aoKqwfccyZSaU7J3xpJ8behMp9N fw@core"
           ];
         };
       };