diff --git a/nixos-infect b/nixos-infect
index dc62996..e0c86db 100755
--- a/nixos-infect
+++ b/nixos-infect
@@ -5,6 +5,7 @@
 set -e -o pipefail
 
 makeConf() {
+  export HASHED_PASSWORD=$( mkpasswd -m sha-512 "$PASSWORD" )
   # Skip everything if main config already present
   [[ -e /etc/nixos/configuration.nix ]] && return 0
   # NB <<"EOF" quotes / $ ` in heredocs, <<EOF does not