MyNixOS website logo
option

services.bulwark.admin.passwordHashFile

File containing the admin password hash

Generate with

SALT=$(openssl rand -hex 32)
HASH64=$(openssl kdf \
  -kdfopt pass:"YOUR-PASSWORD" \
  -kdfopt hexsalt:$SALT \
  -keylen 64 -kdfopt n:16384 -kdfopt r:8 -kdfopt p:1 \
  -binary SCRYPT | base64)
SALT64=$(echo $SALT | xxd -r -p | base64)

echo "\$scrypt\$N=16384,r=8,p=1\$$SALT64\$$HASH64"