home-manager/modules/services/password-store-sync.nix
2020-02-02 01:07:28 +01:00

72 lines
2 KiB
Nix

{ config, lib, pkgs, ... }:
with lib;
let
serviceCfg = config.services.password-store-sync;
programCfg = config.programs.password-store;
in {
meta.maintainers = with maintainers; [ pacien ];
options.services.password-store-sync = {
enable = mkEnableOption "Password store periodic sync";
frequency = mkOption {
type = types.str;
default = "*:0/5";
description = ''
How often to synchronise the password store git repository with its
default upstream.
</para><para>
This value is passed to the systemd timer configuration as the
<literal>onCalendar</literal> option.
See
<citerefentry>
<refentrytitle>systemd.time</refentrytitle>
<manvolnum>7</manvolnum>
</citerefentry>
for more information about the format.
'';
};
};
config = mkIf serviceCfg.enable {
assertions = [{
assertion = programCfg.enable;
message = "The 'services.password-store-sync' module requires"
+ " 'programs.password-store.enable = true'.";
}];
systemd.user.services.password-store-sync = {
Unit = { Description = "Password store sync"; };
Service = {
CPUSchedulingPolicy = "idle";
IOSchedulingClass = "idle";
Environment = let
makeEnvironmentPairs =
mapAttrsToList (key: value: "${key}=${builtins.toJSON value}");
in makeEnvironmentPairs programCfg.settings;
ExecStart = toString (pkgs.writeShellScript "password-store-sync" ''
${pkgs.pass}/bin/pass git pull --rebase && \
${pkgs.pass}/bin/pass git push
'');
};
};
systemd.user.timers.password-store-sync = {
Unit = { Description = "Password store periodic sync"; };
Timer = {
Unit = "password-store-sync.service";
OnCalendar = serviceCfg.frequency;
Persistent = true;
};
Install = { WantedBy = [ "timers.target" ]; };
};
};
}