feat(sj-vps-htz0): separate secrets

nix/os/devices/sj-vps-htz0/configuration.nix

@@ -1,12 +1,28 @@
-{...}: {
+{
+  nodeName,
+  config,
+  ...
+}: {
   disabledModules = [];
   imports = [
     ../../profiles/common/configuration.nix
+    {
+      users.commonUsers = {
+        enable = true;
+        enableNonRoot = false;
+        rootPasswordFile = config.sops.secrets.passwords-root.path;
+      };
+
+      sops.secrets.passwords-root = {
+        sopsFile = ../../../../secrets/${nodeName}/secrets.yaml;
+        neededForUsers = true;
+        format = "yaml";
+      };
+    }
     ../../modules/opinionatedDisk.nix
 
     ./system.nix
     ./hw.nix
-    ./pkg.nix
     ./boot.nix
   ];
 }