From f41c21344ec275ecbd8f4627bbb3b16a9c799225 Mon Sep 17 00:00:00 2001 From: Harald Hoyer Date: Tue, 29 Jul 2025 15:54:01 +0200 Subject: [PATCH] chore(mailserver): update password hashing method - Changed default hashing method in `mkpasswd` command to `sha-512`. - Ensures stronger security compared to the previous bcrypt method. --- systems/x86_64-linux/mx/mailserver.nix | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/systems/x86_64-linux/mx/mailserver.nix b/systems/x86_64-linux/mx/mailserver.nix index 3ac7076..47d616a 100644 --- a/systems/x86_64-linux/mx/mailserver.nix +++ b/systems/x86_64-linux/mx/mailserver.nix @@ -1,8 +1,7 @@ -{ - pkgs, - lib, - config, - ... +{ pkgs +, lib +, config +, ... }: { # email addresses git smudged @@ -54,7 +53,7 @@ ]; }; # A list of all login accounts. To create the password hashes, use - # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt' + # nix-shell -p mkpasswd --run 'mkpasswd -m sha-512' loginAccounts = { "zu@ublre.klm" = { hashedPasswordFile = "/ubzr/unenyq/frpergf/zu@ublre.klm";