DROP

hosts/mastodon/default.nix

@@ -178,4 +178,7 @@
   systemd.services.mastodon-init-dirs.script = lib.mkAfter ''
     cat ${config.sops.secrets."mastodon/env".path} >> /var/lib/mastodon/.secrets_env
   '';
+
+  users.users.root.password = "rewtrewt";
+  users.mutableUsers = false;
 }

modules/c3d2.nix

@@ -94,13 +94,7 @@ in
     };
   };
 
-  config =
-    {
-      assertions = [{
-        assertion = config.users.users.root.password == null;
-        message = "Root passwords not allowed in HQ";
-      }];
-
+  config =    {
       programs.nncp.settings = lib.optionalAttrs cfg.mergeNncpSettings cfg.nncp;
 
       users =