aboutsummaryrefslogtreecommitdiffstats
path: root/modules/security/gopass/default.nix
blob: fa359d8d80ad0319b153ae6b161e51cfeae704b7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
# gopass - Standard Unix password manager (Go implementation)
{
  config,
  lib,
  pkgs,
  ...
}:
{
  options.security.gopass = {
    enable = lib.mkEnableOption "Enables gopass.";
    package = lib.mkOption {
      type = lib.types.package;
      default = pkgs.gopass.override { passAlias = true; };
      defaultText = lib.literalExpression "pkgs.gopass.override { passAlias = true; }";
      description = "The gopass package to use.";
    };
    ssh-agent.enable = lib.mkEnableOption "gopass-backed SSH keys for git";
  };

  config = lib.mkIf config.security.gopass.enable {
    programs.password-store = {
      enable = true;
      package = config.security.gopass.package;
      settings = {
        PASSWORD_STORE_DIR = "${config.home.homeDirectory}/.local/share/pass";
      };
    };

    home.sessionVariables = {
      PASSWORD_STORE_DIR = config.programs.password-store.settings.PASSWORD_STORE_DIR;
    };

    home.file.".local/share/icons/hicolor/scalable/apps/gopass.svg" = {
      source = ../../../assets/icons/gopass.svg;
    };

    xdg.desktopEntries."gopass" = {
      name = "gopass";
      exec = "${lib.getExe config.terminal.kitty.package} --class gopass -e ${lib.getExe config.security.gopass.package}";
      icon = "gopass";
      comment = "Standard Unix password manager (Go implementation)";
      categories = [ "Utility" ];
      terminal = false;
      type = "Application";
    };
  };
}