Immutable Users

Set users.mutableUsers to false to make all user creation declarative.
All users now must be defined in configuration.nix and make sure they
have hashed passwords set.

base-config.nix

@@ -83,6 +83,11 @@
   # Enable touchpad support (enabled default in most desktopManager).
   # services.xserver.libinput.enable = true;
 
+  # Disable mutableUsers. By doing this you can no longer use useradd or groupadd
+  # for user management. All users are now declarative. If a user needs to be able
+  # to login make sure you set hashedPassword on users.users.<name> using mkpasswd.
+  users.mutableUsers = false;
+
   # Define a user account. Don't forget to set a password with 'passwd'.
   users.users.wesley = {
     isNormalUser = true;