17 lines
310 B
Nix
17 lines
310 B
Nix
|
{ lib, pkgs, ... }:
|
||
|
|
||
|
pkgs.writeScriptBin "hashPassword" ''
|
||
|
#! /bin/sh
|
||
|
# usage: hashPassword
|
||
|
set -euf
|
||
|
|
||
|
export PATH=${lib.makeSearchPath "bin" (with pkgs; [
|
||
|
coreutils
|
||
|
mkpasswd
|
||
|
openssl
|
||
|
])}
|
||
|
|
||
|
salt=$(openssl rand -base64 16 | tr -d '+=' | head -c 16)
|
||
|
exec mkpasswd -m sha-512 -S "$salt"
|
||
|
''
|