From 4a40bc722494457ead24ed27c3fc9d744828d363 Mon Sep 17 00:00:00 2001
From: Raphael Borun Das Gupta <git@raphael.dasgupta.ch>
Date: Sun, 5 Apr 2020 19:53:46 +0000
Subject: [PATCH] make users immutable (pw always from nixos config)

---
 role/base/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/role/base/default.nix b/role/base/default.nix
index 102e9af..3d1413f 100644
--- a/role/base/default.nix
+++ b/role/base/default.nix
@@ -47,6 +47,7 @@
 
   nix.trustedUsers = [ "root" "@wheel" ];
 
+  users.mutableUsers = false;
   users.users = rec {
     root.openssh.authorizedKeys.keys =
       lib.flatten (map (u: u.openssh.authorizedKeys.keys) [ fhauser das-g ]);