blob: 70f101f3df9229b17fa40da4d5df083b354bbaf9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
# Standard Unix password manager
{
config,
lib,
pkgs,
...
}:
let
gopassKeys = config.security.ssh.gopassKeys;
gopassSshLoadScript = pkgs.writeShellApplication {
name = "gopass-ssh-load";
runtimeInputs = with pkgs; [
config.security.gopass.package
gnupg
openssh
bash
];
text =
builtins.replaceStrings
[
"@@GOPASS_SSH_KEYS@@"
"@@GNUPGHOME@@"
]
[
(lib.concatStringsSep " " gopassKeys)
config.home.sessionVariables.GNUPGHOME
]
(builtins.readFile ./gopass-ssh-load.sh);
};
in
{
options.security.gopass = {
enable = lib.mkEnableOption "Enables gopass.";
package = lib.mkOption {
type = lib.types.package;
readOnly = true;
default = config.programs.password-store.package;
description = "The gopass package to use.";
};
ssh-agent = {
enable = lib.mkEnableOption "gopass-backed SSH keys for git";
package = lib.mkOption {
type = lib.types.package;
readOnly = true;
default = gopassSshLoadScript;
description = "The gopass-ssh-load script package.";
};
};
};
config = lib.mkMerge [
(lib.mkIf config.security.gopass.enable {
programs.password-store = {
enable = true;
package = pkgs.gopass.override { passAlias = true; };
settings = {
PASSWORD_STORE_DIR = "${config.home.homeDirectory}/.local/share/pass";
};
};
home.sessionVariables = {
PASSWORD_STORE_DIR = config.programs.password-store.settings.PASSWORD_STORE_DIR;
};
home.file.".local/share/icons/hicolor/scalable/apps/gopass.svg" = {
source = ../../../assets/icons/apps/gopass.svg;
};
xdg.desktopEntries."gopass" = {
name = "gopass";
exec = "${lib.getExe config.terminal.kitty.package} --class gopass -e ${lib.getExe config.security.gopass.package}";
icon = "gopass";
comment = "Standard Unix password manager (Go implementation)";
categories = [ "Utility" ];
terminal = false;
type = "Application";
};
})
(lib.mkIf config.security.gopass.ssh-agent.enable {
home.packages = [ config.security.gopass.ssh-agent.package ];
})
];
}
|
