e34fbe1801
* pass-secret-service: Add dbus file, assert
Add the dbus service file in the package folder to XDG_DATA_HOME, as
well as adding an assertion to ensure both it and `gnome-keyring` aren't
enabled at the same time.
* pass-secret-service: Add self to CODEOWNERS
* pass-secret-service: Call out conflicting module(s)
* pass-secret-service: Revert `storePath` change
Signed-off-by: Cynthia Fox <cyntheticfox@gh0st.sh>
* pass-secret-service: Add password-store module default changes info
* pass-secret-service: Fix default info, modularize conflict checks
Signed-off-by: Cynthia Fox <cyntheticfox@gh0st.sh>
* Revert "pass-secret-service: Fix default info, modularize conflict checks"
This reverts commit 851df4fe49.
* pass-secret-service: Fix default info
Signed-off-by: Cynthia Fox <cyntheticfox@gh0st.sh>
* pass-secret-service: Indent `storePath` description
---------
Signed-off-by: Cynthia Fox <cyntheticfox@gh0st.sh>
70 lines
2 KiB
Nix
70 lines
2 KiB
Nix
{ pkgs, config, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.pass-secret-service;
|
|
|
|
busName = "org.freedesktop.secrets";
|
|
in {
|
|
meta.maintainers = with maintainers; [ cab404 cyntheticfox ];
|
|
|
|
options.services.pass-secret-service = {
|
|
enable = mkEnableOption "Pass libsecret service";
|
|
|
|
package = mkPackageOption pkgs "pass-secret-service" { };
|
|
|
|
storePath = mkOption {
|
|
type = with types; nullOr str;
|
|
default = null;
|
|
defaultText = "$HOME/.password-store";
|
|
example = "/home/user/.local/share/password-store";
|
|
description = ''
|
|
Absolute path to password store. Defaults to
|
|
<filename>$HOME/.password-store</filename> if the
|
|
<option>programs.password-store</option> module is not enabled, and
|
|
<option>programs.password-store.settings.PASSWORD_STORE_DIR</option> if it is.
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
assertions = [
|
|
(hm.assertions.assertPlatform "services.pass-secret-service" pkgs
|
|
platforms.linux)
|
|
{
|
|
assertion = !config.services.gnome-keyring.enable;
|
|
message = ''
|
|
Only one secrets service per user can be enabled at a time.
|
|
Other services enabled:
|
|
- gnome-keyring
|
|
'';
|
|
}
|
|
];
|
|
|
|
systemd.user.services.pass-secret-service =
|
|
let binPath = "${cfg.package}/bin/pass_secret_service";
|
|
in {
|
|
Unit = {
|
|
AssertFileIsExecutable = "${binPath}";
|
|
Description = "Pass libsecret service";
|
|
Documentation = "https://github.com/mdellweg/pass_secret_service";
|
|
PartOf = [ "default.target" ];
|
|
};
|
|
|
|
Service = {
|
|
Type = "dbus";
|
|
ExecStart = "${binPath} ${
|
|
optionalString (cfg.storePath != null) "--path ${cfg.storePath}"
|
|
}";
|
|
BusName = busName;
|
|
};
|
|
|
|
Install.WantedBy = [ "default.target" ];
|
|
};
|
|
|
|
xdg.dataFile."dbus-1/services/${busName}.service".source =
|
|
"${cfg.package}/share/dbus-1/services/${busName}.service";
|
|
};
|
|
}
|