aboutsummaryrefslogtreecommitdiff
path: root/users/fcuny/desktop/trust/pass.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2022-04-03 15:12:16 -0700
committerFranck Cuny <franck@fcuny.net>2022-04-03 15:12:16 -0700
commitb72274ab06b4c160fc8d3afe8e2d67863c893a58 (patch)
treeb00c3b128d55d1f51395243902c0dea60fe7df4b /users/fcuny/desktop/trust/pass.nix
parentRevert "create a new role for navidrome" (diff)
downloadinfra-b72274ab06b4c160fc8d3afe8e2d67863c893a58.tar.gz
home-manager: add `isTrusted`
Install and configure some programs only on trusted machines. On trusted machines, my mails, GPG and a few other things are configured. A machine where this is not needed on a regular basis to get things done don't need that much information. Also rename `desktop/trust` to `trusted`, in case we want these packages on a host that is not a desktop, and `trusted` is a better description.
Diffstat (limited to 'users/fcuny/desktop/trust/pass.nix')
-rw-r--r--users/fcuny/desktop/trust/pass.nix35
1 files changed, 0 insertions, 35 deletions
diff --git a/users/fcuny/desktop/trust/pass.nix b/users/fcuny/desktop/trust/pass.nix
deleted file mode 100644
index a552318..0000000
--- a/users/fcuny/desktop/trust/pass.nix
+++ /dev/null
@@ -1,35 +0,0 @@
-{ pkgs, config, ... }:
-
-{
- programs.password-store = {
- enable = true;
- settings = {
- PASSWORD_STORE_DIR = "${config.xdg.dataHome}/password-store";
- PASSWORD_STORE_GENERATED_LENGTH = "30";
- PASSWORD_STORE_CHARACTER_SET = "a-zA-Z0-9~!@#$%^&*()-_=+[]{};:,.<>?";
- PASSWORD_STORE_KEY = config.programs.gpg.settings.default-key;
- };
- };
-
- programs.git = {
- signing = {
- key = config.programs.gpg.settings.default-key;
- signByDefault = true;
- };
- extraConfig = {
- credential = {
- helper = "${pkgs.gitAndTools.pass-git-helper}/bin/pass-git-helper";
- useHttpPath = true;
- };
- };
- };
-
- xdg.configFile."pass-git-helper/git-pass-mapping.ini" = {
- source = ./git-pass-mapping.ini;
- };
-
- services.password-store-sync.enable = true;
-
- # Ensure the password store things are in the systemd session
- systemd.user.sessionVariables = config.programs.password-store.settings;
-}