krebs/5pkgs/hashPassword/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

{ lib, pkgs, ... }:

pkgs.writeScriptBin "hashPassword" ''
  #! /bin/sh
  # usage: hashPassword
  set -euf

  export PATH=${lib.makeBinPath (with pkgs; [
    coreutils
    mkpasswd
    openssl
  ])}

  salt=$(openssl rand -base64 16 | tr -d '+=' | head -c 16)
  exec mkpasswd -m sha-512 -S "$salt"
''