use hashed password file

3 files changed, 8 insertions, 2 deletions

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index c8eb12f..dac4663 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -12,4 +12,5 @@ in
   "work-mail.age".publicKeys = keys;
   "university-mail.age".publicKeys = keys;
   "authinfo.age".publicKeys = keys;
+  "user-pass.age".publicKeys = keys;
 }
diff --git a/secrets/user-pass.age b/secrets/user-pass.age
new file mode 100644
index 0000000..bc492d8
--- /dev/null
+++ b/secrets/user-pass.age
diff --git a/users/leonardo.nix b/users/leonardo.nix
index ae6c15b..ab7a48e 100644
--- a/users/leonardo.nix
+++ b/users/leonardo.nix
@@ -99,7 +99,7 @@
       description = "leonardo";
       extraGroups = [ "networkmanager" "wheel" ];
       shell = pkgs.bashInteractive;
-      hashedPassword = "$y$j9T$NT9Ymktl8npD5RomDyBmK0$YfrrP0fcHRPcJZAAO.g8pRsSBoYvIq2aBBxBAHIesU2";
+      hashedPasswordFile = config.age.secrets.user-pass.path;
     };
 
     age.secrets = {
@@ -123,6 +123,11 @@
         owner = "1000";
         group = "100";
       };
+      user-pass = {
+        file = ../secrets/user-pass.age;
+        owner = "1000";
+        group = "100";
+      }
     };
     services.gnome.gnome-browser-connector.enable = true;
     home-manager = {
@@ -215,7 +220,7 @@
             diff-so-fancy.enable = true;
             extraConfig = {
               user.name = "Leonardo Santiago";
-              user.email = "[email protected]";
+              user.email = "[email protected]";
               color.ui = true;
             };
           };