support unhashed password files

2026-03-04 17:14:45 +00:00
parent e1afec5b08
commit 12ae5dd89b
5 changed files with 67 additions and 5 deletions
@@ -178,6 +178,19 @@ in
                '';
              };

+              passwordFile = mkOption {
+                type =
+                  with types;
+                  nullOr (pathWith {
+                    inStore = false;
+                  });
+                default = null;
+                example = "/run/keys/user1-password";
+                description = ''
+                  A file containing the user's plain text password. The value will be hashed at runtime.
+                '';
+              };
+
              aliases = mkOption {
                type = with types; listOf types.str;
                example = [