systems/x86_64-linux/ocicat/users/default.nix

{ config, ... }:
{
  users.users.coded.hashedPasswordFile =
    config.sops.secrets."systems/x86_64-linux/ocicat/users/passwords.sops.coded.json:coded".path;

  users.users.minion.hashedPasswordFile =
    config.sops.secrets."systems/x86_64-linux/ocicat/users/passwords.sops.coded.json:minion".path;

  sops.secrets."systems/x86_64-linux/ocicat/users/passwords.sops.coded.json:coded" = {
    mode = "0400";
    owner = config.users.users.root.name;
    group = config.users.users.root.group;
    sopsFile = ./passwords.sops.coded.json;
    format = "json";
    key = "coded";
    neededForUsers = true;
  };

  sops.secrets."systems/x86_64-linux/ocicat/users/passwords.sops.coded.json:minion" = {
    mode = "0400";
    owner = config.users.users.root.name;
    group = config.users.users.root.group;
    sopsFile = ./passwords.sops.coded.json;
    format = "json";
    key = "minion";
    neededForUsers = true;
  };
}