aboutsummaryrefslogtreecommitdiffstats
path: root/modules
diff options
context:
space:
mode:
Diffstat (limited to 'modules')
-rw-r--r--modules/security/gopass/default.nix16
-rw-r--r--modules/security/gopass/gopass-ssh-load.sh3
2 files changed, 13 insertions, 6 deletions
diff --git a/modules/security/gopass/default.nix b/modules/security/gopass/default.nix
index fa5e486..70f101f 100644
--- a/modules/security/gopass/default.nix
+++ b/modules/security/gopass/default.nix
@@ -16,11 +16,17 @@ let
openssh
bash
];
- text = ''
- export GNUPGHOME="${config.home.sessionVariables.GNUPGHOME}"
- export GOPASS_SSH_KEYS="${lib.concatStringsSep " " gopassKeys}"
- ${builtins.readFile ./gopass-ssh-load.sh}
- '';
+ text =
+ builtins.replaceStrings
+ [
+ "@@GOPASS_SSH_KEYS@@"
+ "@@GNUPGHOME@@"
+ ]
+ [
+ (lib.concatStringsSep " " gopassKeys)
+ config.home.sessionVariables.GNUPGHOME
+ ]
+ (builtins.readFile ./gopass-ssh-load.sh);
};
in
{
diff --git a/modules/security/gopass/gopass-ssh-load.sh b/modules/security/gopass/gopass-ssh-load.sh
index c6b9a29..e974713 100644
--- a/modules/security/gopass/gopass-ssh-load.sh
+++ b/modules/security/gopass/gopass-ssh-load.sh
@@ -4,7 +4,8 @@ set -o nounset
set -o pipefail
# Load SSH keys from gopass password store
-export GNUPGHOME="${GNUPGHOME:-$HOME/.local/share/gnupg}"
+export GNUPGHOME="@@GNUPGHOME@@"
+export GOPASS_SSH_KEYS="@@GOPASS_SSH_KEYS@@"
SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
export SSH_AUTH_SOCK