From 4e1bcd642529a41c66cf1051a32b0883b767dc55 Mon Sep 17 00:00:00 2001
From: = <=>
Date: Sun, 9 Nov 2025 00:11:12 +0000
Subject: [PATCH] make rootpass secure and static

---
 services/lldap.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/services/lldap.nix b/services/lldap.nix
index 31161fd..d84cfa3 100644
--- a/services/lldap.nix
+++ b/services/lldap.nix
@@ -1,7 +1,11 @@
 {config, ...}: let
   lldapPort = 8089;
 in {
-  age.secrets."hidden_service/lldap".file = ../secrets/hidden_service/lldap;
+  age.secrets = {
+    "hidden_service/lldap".file = ../secrets/hidden_service/lldap;
+    "lldap_root_pass".file = ../secrets/lldap_root_pass;
+  }
+  
 
   services.lldap = {
     enable = true;
@@ -11,7 +15,8 @@ in {
       ldap_user_email = "root@distrust.network";
       ldap_user_dn = "root";
       ldap_base_dn = "dc=distrust,dc=network";
-      ldap_user_pass = "VERY_SECURE";
+      ldap_user_pass_file = config.age.secrets."lldap_root_pass".path;
+      force_ldap_user_pass_reset = true;
     };
   };