29 lines
671 B
Nix
29 lines
671 B
Nix
{ pkgs, config, lib, ... }: let
|
|
cfg = config.grimmShared;
|
|
in {
|
|
config = with cfg; lib.mkIf (enable && tooling.enable && tooling.pass) {
|
|
security.polkit.enable = true;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
mkpasswd
|
|
pinentry
|
|
gnupg
|
|
pass
|
|
libsecret
|
|
(writeShellScriptBin "passw" "pass $@")
|
|
] ++ lib.optionals cfg.graphical [
|
|
lxqt.lxqt-policykit
|
|
];
|
|
|
|
services.passSecretService.enable = true;
|
|
programs.gnupg.agent = {
|
|
settings = {
|
|
# default-cache-ttl = 6000;
|
|
};
|
|
pinentryPackage = lib.mkDefault pkgs.pinentry;
|
|
enable = true;
|
|
# enableSSHSupport = true;
|
|
};
|
|
};
|
|
}
|