feat: init password-store

This commit is contained in:
Ryan Yin
2024-01-09 23:34:54 +08:00
parent b6f46da403
commit 343ebacdcf
4 changed files with 38 additions and 4 deletions

View File

@@ -1,4 +1,4 @@
{pkgs, config, ...}: {
{pkgs, config, lib, ...}: {
programs.password-store = {
enable = true;
package = pkgs.pass.withExtensions (exts: [
@@ -12,6 +12,19 @@
# See the “Environment variables” section of pass(1) and the extension man pages for more information about the available keys.
settings = {
PASSWORD_STORE_DIR = "${config.xdg.dataHome}/password-store";
# Overrides the default gpg key identification set by init.
# Hexadecimal key signature is recommended.
# Multiple keys may be specified separated by spaces.
PASSWORD_STORE_KEY = lib.strings.concatStringsSep " " [
"62526A4A0CF43E33" # E - Ryan Yin (Personal) <ryan4yin@linux.com>
];
# all .gpg-id files and non-system extension files must be signed using a detached signature using the GPG key specified by
# the full 40 character upper-case fingerprint in this variable.
# If multiple fingerprints are specified, each separated by a whitespace character, then signatures must match at least one.
# The init command will keep signatures of .gpg-id files up to date.
PASSWORD_STORE_SIGNING_KEY = lib.strings.concatStringsSep " " [
"433A66D63805BD1A" # S - Ryan Yin (Personal) <ryan4yin@linux.com>
];
PASSWORD_STORE_CLIP_TIME = "60";
PASSWORD_STORE_GENERATED_LENGTH = "15";
PASSWORD_STORE_ENABLE_EXTENSIONS = "true";