Commit dee563e

HPCesia <me@hpcesia.com>
2026-06-19 09:22:08
Add secret store service for desktop
1 parent a5ee2b0
Changed files (2)
modules
desktop
roles
modules/desktop/env/secret-store.nix
@@ -0,0 +1,24 @@
+{lib, ...}: {
+  den.aspects.desktop.env.secret-store = {user, ...}: {
+    persistUser = {
+      directories = lib.optional (!(lib.elem "homeManager" user.classes)) ".local/share/keyrings";
+    };
+    persistHome = {config, ...}: {
+      directories = ["${config.xdg.dataHome}/keyrings"];
+    };
+
+    nixos = {
+      services.gnome.gnome-keyring = {
+        enable = true;
+      };
+      security.pam.services.${user.userName}.enableGnomeKeyring = true;
+
+      xdg.portal = {
+        enable = true;
+        config.common."org.freedesktop.impl.portal.Secret" = [
+          "gnome-keyring"
+        ];
+      };
+    };
+  };
+}
modules/roles/desktop.nix
@@ -14,6 +14,7 @@
       desktop.yubikey
 
       desktop.env.sddm
+      desktop.env.secret-store
     ];
   };
 }