home-manager-config.git/modules/security/ssh, branch masterMy personal home manager configurations.
https://git.chakladar.me/arpit/home-manager-config.git/atom?h=master2026-09-23T22:49:59+00:00refactor: ran newly configured formatter for the whole project2026-09-23T22:49:59+00:00Arpit Chakladararpitchakladar@gmail.com2026-09-23T22:49:59+00:00urn:sha1:3a6e45ad18c519b21c9cadb2d374148647886b05refactor(naming): use kebab-case option names and consistent gopass secret naming2026-09-23T22:12:34+00:00Arpit Chakladararpitchakladar@gmail.com2026-09-23T22:12:34+00:00urn:sha1:44b8624d201e70c8418ada5db3c46e9ba130ea30chore: added + fixed all description comments in all scripts2026-09-14T23:14:30+00:00Arpit Chakladararpitchakladar@gmail.com2026-09-14T23:14:30+00:00urn:sha1:35ef3a48ade2329d4c64e74bf7a9a8cc18333fe3fix(security/ssh): fixed the loading ssh key from gopass2026-09-09T23:02:38+00:00Arpit Chakladararpitchakladar@gmail.com2026-09-09T23:02:33+00:00urn:sha1:96ec0f89101ea414e764565e022b9bc83a96071c
Now on every home-manager switch we run a script that loads the key form
gopass to gpg-agent, then the gpg-agent is responsible for storing it.
Anytime gopass changes the ssh key we must run home-manager switch to
load the ssh key into gpg agent.
refactor: rewrote how ssh keys are handled in gopass-ssh-load2026-08-28T22:20:27+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-08-17T09:55:55+00:00urn:sha1:2ac22a72455341a3efced289782fe5daf5d788ee
- all ssh keys that are used under ssh/ have to be explicitely added via
security.ssh.gopassKeys = [ ... ]
feat: Rewrote neomutt keybindings, updated comments2026-08-05T12:28:58+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-08-05T12:28:58+00:00urn:sha1:53dc8c95e525f922461dfc1768121ee02380e4ec
- Rewriting the neomutt keybindings by hand
- Updated comments to be simpler
feat: moved gpg data directory, other gopass ssh keys, script builder2026-08-04T14:31:06+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-08-04T14:31:06+00:00urn:sha1:0a7afa2d1e576f05253b62c6b17e5e4873fbdebc
- Using ~/.local/share/gnupg/ for storing the data for gnupg, and made
the necessary changes in all places to that effect
- Additional ssh keys can be added to gopass under ssh/, which is on top
of the git servers that already existed
- Using pkgs.writeShellApplication for creating the scripts, stopped
setting path for each dependency (creating a long PATH variable and
thus finding binaries may take longer), instead using the inbuild dependency (runtimeInputs) for the scripts
feat: Added package option to each module, darkman service2026-08-02T12:48:07+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-08-02T12:48:07+00:00urn:sha1:2e0f6163f61cb1e4195f1a08ad1148e57a4f5843
- Added package options to each module which defines the
package/derivation that should be used in all other modules
- Added a systemd oneshot service that autosets darkman to dark mode
- Removed the prompt from rofi
feat(gopass-ssh-load): moved the gopass-ssh-load into modules/scripts2026-07-29T18:15:01+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-07-29T18:15:01+00:00urn:sha1:175c923556d7e9d2ed83b4b281e1bdf54bba51bf
- Maintaining the format of the rest of the codebase moving
gopass-ssh-load into its own script in modules/scripts instead of
writing it directly in modules/security/gopass/default.nix
feat(ssh): lazy-loading ssh keys from gopass2026-07-29T18:06:51+00:00Arpit Chakladararpitchakladar+git@gmail.com2026-07-29T18:06:51+00:00urn:sha1:357d69f4ce7da70e746c465c8fa32c8d6dbe815e
- Loading ssh keys from gopass only when ssh command runs for the first
time