From 5eaa2f554c01ed81395968f39db0e3e53147820e Mon Sep 17 00:00:00 2001
From: Lucas Desgouilles <lucas.desgouilles@numerique.gouv.fr>
Date: Thu, 17 Sep 2026 19:02:12 +0200
Subject: [PATCH] feat: hide admins in SDDM

The admins we add show as users in the login screen, it is kind of
distracting to users.
All admins should know how to log in through the "Other user" option
or directly through a tty.
---
 modules/graphical-interface/plasma.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/graphical-interface/plasma.nix b/modules/graphical-interface/plasma.nix
index 90859d2b..fcf0c346 100644
--- a/modules/graphical-interface/plasma.nix
+++ b/modules/graphical-interface/plasma.nix
@@ -32,7 +32,14 @@ in
   };
   config = mkIf (cfg.variant == "kde") {
     services.xserver.enable = true;
-    services.displayManager.sddm.enable = true;
+
+    services.displayManager.sddm = {
+      enable = true;
+      settings = mkIf config.securix.admins.enable {
+        Users.HideUsers = lib.concatMapStringsSep "," (admin: admin.name) config.securix.admins.accounts;
+      };
+    };
+
     services.desktopManager.plasma6.enable = true;
 
     environment.systemPackages = cfg.kde.lookAndFeelPackages;