encryption bitch

system/core/defaultPackages.nix

@@ -1,3 +1,10 @@
-{pkgs,...}: {
-  environment.defaultPackages = [pkgs.neovim]; # Still have to be able to edit configs.
+{
+  pkgs,
+  inputs,
+  ...
+}: {
+  environment.defaultPackages = [
+    pkgs.neovim
+    inputs.agenix.packages.${pkgs.system}.default
+  ]; # Still have to be able to edit configs.
 }

system/core/users.nix

@@ -1,8 +1,12 @@
-{pkgs, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
   users.users.jsw = {
     isNormalUser = true;
     shell = pkgs.fish;
-    initialPassword = "changeme";
+    hashedPasswordFile = config.age.secrets.password.path;
     extraGroups = [
       "libvirtd"
       "NetworkManager"

system/server/transfer-sh.nix

@@ -3,11 +3,14 @@
     enable = config.niksos.server;
     settings = {
       PURGE_DAYS = 7;
-      MAX_UPLOAD_SIZE = 4 * 1000 * 1000; # 2gb
+      MAX_UPLOAD_SIZE = 4 * 1000 * 1000; # 4gb
       # CORS_DOMAINS = "transfer.jsw.tf"; #FIXME: open it to the world wide web.
       BASEDIR = "/var/lib/transfer.sh";
       LISTENER = ":9000";
+      HTTP_AUTH_USER = "jsw";
+      EMAIL_CONTACT = "jurnwubben@gmail.com";
     };
+    secretFile = config.age.secrets.transferSh.path;
   };
   systemd.services.transfer-sh.serviceConfig = {
     StateDirectory = "transfer.sh";