|
{ lib, pkgs, ... }:
|
|
|
|
pkgs.writeScriptBin "hashPassword" ''
|
|
#! /bin/sh
|
|
# usage: hashPassword
|
|
set -euf
|
|
|
|
export PATH=${lib.makeSearchPath "bin" (with pkgs; [
|
|
coreutils
|
|
mkpasswd
|
|
openssl
|
|
])}
|
|
|
|
salt=$(openssl rand -base64 16 | tr -d '+=' | head -c 16)
|
|
exec mkpasswd -m sha-512 -S "$salt"
|
|
''
|