users: change to immutable users

common/users/default.nix

@@ -4,4 +4,6 @@
     ./randomcat.nix
     ./richard.nix
   ];
+
+  users.mutableUsers = false;
 }

hosts/tohru/configuration.nix

@@ -43,6 +43,8 @@
   sound.enable = true;
   hardware.pulseaudio.enable = true;
 
+  age.secrets.user-password-tohru-qenya.file = ../../secrets/user-password-tohru-qenya.age;
+  users.users.qenya.hashedPasswordFile = config.age.secrets.user-password-tohru-qenya.path;
   users.users.qenya.extraGroups = [
     "wheel" # sudo
     "networkmanager" # UI wifi configuration

secrets.nix

@@ -4,6 +4,7 @@ let
   commonKeys = keys.users.qenya;
 
   secrets = with keys; {
+    user-password-tohru-qenya = [ machines.tohru ];
     wireguard-peer-orm = [ machines.orm ];
     wireguard-peer-tohru = [ machines.tohru ];
     wireguard-peer-yevaud = [ machines.yevaud ];