aboutsummaryrefslogtreecommitdiffstats
path: root/modules/security
diff options
context:
space:
mode:
authorArpit Chakladar <arpitchakladar+git@gmail.com>2026-09-02 04:00:48 +0530
committerArpit Chakladar <arpitchakladar+git@gmail.com>2026-09-02 04:00:48 +0530
commitbb271dca9da2f0941c2a30625d810054335d6af6 (patch)
tree574fc64bfd2e0626a7dfcea924b743486b6af289 /modules/security
parent2aa898cfe9877a9b9e4694b4b20002555ed6e46f (diff)
downloadhome-manager-config-bb271dca9da2f0941c2a30625d810054335d6af6.tar.gz
home-manager-config-bb271dca9da2f0941c2a30625d810054335d6af6.zip
chore(security/gopass): minor change to gopass-ssh-load script derivation
Diffstat (limited to 'modules/security')
-rw-r--r--modules/security/gopass/default.nix16
-rw-r--r--modules/security/gopass/gopass-ssh-load.sh3
2 files changed, 13 insertions, 6 deletions
diff --git a/modules/security/gopass/default.nix b/modules/security/gopass/default.nix
index fa5e486..70f101f 100644
--- a/modules/security/gopass/default.nix
+++ b/modules/security/gopass/default.nix
@@ -16,11 +16,17 @@ let
openssh
bash
];
- text = ''
- export GNUPGHOME="${config.home.sessionVariables.GNUPGHOME}"
- export GOPASS_SSH_KEYS="${lib.concatStringsSep " " gopassKeys}"
- ${builtins.readFile ./gopass-ssh-load.sh}
- '';
+ text =
+ builtins.replaceStrings
+ [
+ "@@GOPASS_SSH_KEYS@@"
+ "@@GNUPGHOME@@"
+ ]
+ [
+ (lib.concatStringsSep " " gopassKeys)
+ config.home.sessionVariables.GNUPGHOME
+ ]
+ (builtins.readFile ./gopass-ssh-load.sh);
};
in
{
diff --git a/modules/security/gopass/gopass-ssh-load.sh b/modules/security/gopass/gopass-ssh-load.sh
index c6b9a29..e974713 100644
--- a/modules/security/gopass/gopass-ssh-load.sh
+++ b/modules/security/gopass/gopass-ssh-load.sh
@@ -4,7 +4,8 @@ set -o nounset
set -o pipefail
# Load SSH keys from gopass password store
-export GNUPGHOME="${GNUPGHOME:-$HOME/.local/share/gnupg}"
+export GNUPGHOME="@@GNUPGHOME@@"
+export GOPASS_SSH_KEYS="@@GOPASS_SSH_KEYS@@"
SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
export SSH_AUTH_SOCK