From c13b241b6cf3439d67c1d5bee5bfaf1a2bdc91aa Mon Sep 17 00:00:00 2001
From: Timothy DeHerrera <tim.deh@pm.me>
Date: Fri, 3 Jan 2020 01:02:08 -0700
Subject: [PATCH] core: empty root passwd by default

---
 profiles/core.nix     | 2 +-
 users/nrd/default.nix | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/profiles/core.nix b/profiles/core.nix
index 850f4e9..8cc10b1 100644
--- a/profiles/core.nix
+++ b/profiles/core.nix
@@ -161,7 +161,7 @@ in
   users = {
     mutableUsers = false;
 
-    users.root.hashedPassword = fileContents ../secrets/root;
+    users.root.hashedPassword = lib.mkDefault "";
   };
 
 }
diff --git a/users/nrd/default.nix b/users/nrd/default.nix
index 00841e1..99dacdf 100644
--- a/users/nrd/default.nix
+++ b/users/nrd/default.nix
@@ -14,10 +14,13 @@ let
   name = "Timothy DeHerrera";
 in
 {
+
   imports = [
     ../../profiles/graphical
   ];
 
+  users.users.root.hashedPassword = fileContents ../../secrets/root;
+
   programs.gnupg.agent = {
     enable = true;
     enableSSHSupport = true;