nix-files/machines/lappy
colin b658b93c64 lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot
this approach lets me persist the password. persisting /etc/shadow
directly wasn't so feasible. populating /etc/shadow at activation time
is something nix already does and is easy to plug into.
so we store the passwd hash in this repo, but encrypt it to the
destination machine's ssh pubkey to add enough entropy that it's not
brute-forceable through the public git repo.
2022-10-23 06:53:06 -07:00
..
default.nix lappy: store the hashed user passwd in git and decrypt it into /etc/passwd on boot 2022-10-23 06:53:06 -07:00
fs.nix rebuild desko and flash it 2022-06-24 02:07:40 -07:00