secrets management with SOPS

users/root.nix

@@ -0,0 +1,7 @@
+{ config, ... }:
+
+{
+  users.users.root = {
+    hashedPasswordFile = config.sops.secrets.pw_root.path;
+  };
+}

users/users.nix

@@ -1,5 +1,6 @@
 {
   imports = [
     ./williamp.nix
+    ./root.nix
   ];
 }

users/williamp.nix

@@ -1,6 +1,9 @@
+{ config, ... }:
+
 {
   users.users.williamp = {
     isNormalUser = true;
+    hashedPasswordFile = config.sops.secrets.pw_williamp.path;
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID5lZ0/JJyLLwSrFfSs+DF/v0EkV2i/SVDf18+/K5NDV me@williamtpeebles.com"
     ];