Add sops-nix

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

users/common/default.nix

@@ -75,6 +75,7 @@ in
         ];
         files = [
           ".zsh_history"
+          ".key.txt"
         ];
         allowOther = true;
       };

users/nick/default.nix

@@ -3,13 +3,19 @@
 {
   imports = [ ../common ];
 
+  sops.secrets.nick-password = {
+    sopsFile = ./secrets/secrets.yaml;
+    key = "password";
+    neededForUsers = true;
+  };
+
   users.users.nick = {
     isNormalUser = true;
     home = "/home/nick";
     email = "nick@karaolidis.com";
     fullName = "Nikolaos Karaolidis";
     description = config.users.users.nick.fullName;
-    hashedPassword = "***REMOVED***";
+    hashedPasswordFile = config.sops.secrets.nick-password.path;
     extraGroups = [ "wheel" ];
     linger = true;
     uid = 1000;