From a3c7dcd88dc4a185ee25cb758e89ef97d36a693d Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 9 May 2023 17:05:34 +0200
Subject: [PATCH] nixos/shadow: Set default encrypt method

Fixes the default for tools like chpasswd, chgpasswd and gpasswd.

Closes: #230880
---
 nixos/modules/programs/shadow.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/programs/shadow.nix b/nixos/modules/programs/shadow.nix
index fab809f279a3..35267acd6bb7 100644
--- a/nixos/modules/programs/shadow.nix
+++ b/nixos/modules/programs/shadow.nix
@@ -41,6 +41,8 @@ let
       # This should be made configurable.
       #CHFN_RESTRICT frwh
 
+      # The default crypt() method, keep in sync with the PAM default
+      ENCRYPT_METHOD YESCRYPT
     '';
 
   mkSetuidRoot = source: