blob: 4fefdd272e527b37222d2bce63082934e60d4463 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
# Standard Unix password manager
{
config,
lib,
pkgs,
...
}:
let
inherit ((import ../../lib/script.nix { inherit lib pkgs; })) mkScriptModule;
gopassKeys = config.security.ssh.gopassKeys;
gopassSshLoad = mkScriptModule {
scope = [
"security"
"gopass"
];
name = "gopass-ssh-load";
path = ./gopass-ssh-load.sh;
description = "Load SSH keys from gopass password store";
env = {
GNUPGHOME = config.home.sessionVariables.GNUPGHOME;
GOPASS_SSH_KEYS = lib.concatStringsSep " " gopassKeys;
};
deps = with pkgs; [
config.security.gopass.package
gnupg
openssh
bash
];
inherit config;
};
in
{
options.security.gopass = {
enable = lib.mkEnableOption "Enables gopass.";
package = lib.mkOption {
type = lib.types.package;
readOnly = true;
default = config.programs.password-store.package;
description = "The gopass package to use.";
};
ssh-agent.enable = lib.mkEnableOption "gopass-backed SSH keys for git";
}
// gopassSshLoad.options.security.gopass;
config = lib.mkMerge [
(lib.mkIf config.security.gopass.enable {
programs.password-store = {
enable = true;
package = pkgs.gopass.override { passAlias = true; };
settings = {
PASSWORD_STORE_DIR = "${config.home.homeDirectory}/.local/share/pass";
};
};
home.sessionVariables = {
PASSWORD_STORE_DIR = config.programs.password-store.settings.PASSWORD_STORE_DIR;
};
home.file.".local/share/icons/hicolor/scalable/apps/gopass.svg" = {
source = ../../../assets/icons/gopass.svg;
};
xdg.desktopEntries."gopass" = {
name = "gopass";
exec = "${lib.getExe config.terminal.kitty.package} --class gopass -e ${lib.getExe config.security.gopass.package}";
icon = "gopass";
comment = "Standard Unix password manager (Go implementation)";
categories = [ "Utility" ];
terminal = false;
type = "Application";
};
})
gopassSshLoad.config
];
}
|
