sops needed for users

README.md

@@ -103,6 +103,9 @@ export NIX_CONFIG="experimental-features = nix-command flakes"
 sudo cryptsetup luksOpen /dev/sda2 cryptroot
 ```
 ``` bash
+mkdir -p /mnt/boot /mnt/nix /mnt/persist
+```
+``` bash
 sudo mount -o subvol=@nix /dev/mapper/cryptroot /mnt/nix
 ```
 ``` bash

hosts/desktop/default.nix

@@ -8,7 +8,7 @@
 
   networking.hostName = "desktop";
 
-  users.users.root.hashedPassword = null;
+  users.users.root.hashedPassword = "!";
 
   users.users.user = {
     isNormalUser = true;

modules/secrets.nix

@@ -5,5 +5,6 @@
 
   sops.secrets.user-password = {
     sopsFile = ../secrets/user-password.yaml;
+    neededForUsers = true;
   };
 }