From 861d0e40ed1fbefd6339e143a51c3e0913878865 Mon Sep 17 00:00:00 2001
From: didier amyot <didier.amyot@all-dressed-programming.com>
Date: Tue, 16 Jun 2026 13:14:40 -0400
Subject: [PATCH] refactor: drop adminPasswordHashFile, keep only
 adminPasswordHash

---
 flake.nix | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/flake.nix b/flake.nix
index a5f8770..580691a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -89,16 +89,10 @@
               description = "Embedding model name.";
             };
 
-            adminPasswordHashFile = lib.mkOption {
-              type = lib.types.nullOr lib.types.path;
-              default = null;
-              description = "Path to a file containing the bcrypt hash of the admin password.";
-            };
-
             adminPasswordHash = lib.mkOption {
               type = lib.types.nullOr lib.types.str;
               default = null;
-              description = "Bcrypt hash of the admin password directly. Prefer adminPasswordHashFile for secrets.";
+              description = "Bcrypt hash of the admin bootstrap password.";
             };
 
             sqlitePath = lib.mkOption {
@@ -139,9 +133,8 @@
                 StateDirectory = "st-pierre";
                 ExecStart = "${st-pierre-pkg}/bin/st-pierre";
               }
-              // lib.optionalAttrs (cfg.openaiApiKeyFile != null || cfg.adminPasswordHashFile != null || cfg.qdrantApiKeyFile != null) {
+              // lib.optionalAttrs (cfg.openaiApiKeyFile != null || cfg.qdrantApiKeyFile != null) {
                 EnvironmentFile = lib.optional (cfg.openaiApiKeyFile != null) cfg.openaiApiKeyFile
-                  ++ lib.optional (cfg.adminPasswordHashFile != null) cfg.adminPasswordHashFile
                   ++ lib.optional (cfg.qdrantApiKeyFile != null) cfg.qdrantApiKeyFile;
               };