feat(desktop|wlroots|secrets): use pass-secret-service

montchr · Feb 8, 2025 · 0d6fe7e · 0d6fe7e
1 parent 0d8de17
commit 0d6fe7e
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 2 deletions.
diff --git a/home/profiles/graphical/__wlroots.nix b/home/profiles/graphical/__wlroots.nix
@@ -1,6 +1,14 @@
 { pkgs, ... }:
 {
   imports = [
+    # A secret service is required.  It's either this one (uses
+    # password-store) or GNOME Keyring, but only one can be enabled at
+    # a time (they provide mutually-exclusive implementations of the
+    # XDG Secret Service protocol).  It's probably not the best idea
+    # to make pass-secret-service a requirement, since it requires the
+    # user to have configured the password-store properly.
+    ../password-store.nix
+
     ./common.nix
     ./cliphist.nix
     ./darkman.nix

diff --git a/home/profiles/graphical/common.nix b/home/profiles/graphical/common.nix
@@ -21,8 +21,6 @@ in
   qt.enable = true;
   qt.platformTheme.name = "gtk3";
 
-  services.gnome-keyring.enable = true;
-
   xdg = {
     userDirs = {
       enable = true;

diff --git a/home/profiles/password-store.nix b/home/profiles/password-store.nix
@@ -27,6 +27,11 @@ lib.mkIf config.programs.gpg.enable {
     };
   };
 
+  services.pass-secret-service = {
+    enable = true;
+    storePath = passwordStorePath;
+  };
+
   programs.browserpass.enable = true;
   programs.browserpass.browsers = [ "firefox" ];