From 4544635ad6276645049123fb61bf1a82e069dbd4 Mon Sep 17 00:00:00 2001
From: DannyDannyDanny <dth@taiga.ai>
Date: Sat, 4 Apr 2026 11:26:54 +0200
Subject: [PATCH] =?UTF-8?q?security:=20remove=20initialPassword=20from=20p?=
 =?UTF-8?q?hantom-ship=20config=20=F0=9F=94=92?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Password is locked in shadow and SSH is key-only, so the
initialPassword served no purpose and was a minor security concern.
---
 nixos/hosts/phantom-ship.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/hosts/phantom-ship.nix b/nixos/hosts/phantom-ship.nix
index 436320e..6370681 100644
--- a/nixos/hosts/phantom-ship.nix
+++ b/nixos/hosts/phantom-ship.nix
@@ -64,7 +64,7 @@ in
   users.users.danny = {
     isNormalUser = true;
     extraGroups = [ "wheel" ];
-    initialPassword = "changeme";  # console fallback; change after first login
+    # Password is locked (key-only SSH). Use NixOS installer or recovery to reset if needed.
   };
 
   # Key-only auth; no password or keyboard-interactive.