From f4e7b106ef132dde38cb463fa51bd99bbe8533b0 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Sun, 18 May 2025 14:41:42 +0200 Subject: ... --- accounts/gkleen@sif/default.nix | 12 +++++++++++- accounts/gkleen@sif/niri/default.nix | 3 +++ accounts/gkleen@sif/synadm/default.nix | 9 +++++++++ accounts/gkleen@sif/synadm/synadm_yaml | 15 +++++++++++++++ 4 files changed, 38 insertions(+), 1 deletion(-) create mode 100644 accounts/gkleen@sif/synadm/default.nix create mode 100644 accounts/gkleen@sif/synadm/synadm_yaml (limited to 'accounts') diff --git a/accounts/gkleen@sif/default.nix b/accounts/gkleen@sif/default.nix index 56fc61ef..e6157d2c 100644 --- a/accounts/gkleen@sif/default.nix +++ b/accounts/gkleen@sif/default.nix @@ -71,6 +71,7 @@ in { imports = [ ./libvirt ./niri + ./synadm flakeInputs.nix-index-database.hmModules.nix-index flakeInputs.impermanence.nixosModules.home-manager.impermanence ]; @@ -364,6 +365,7 @@ in { enable = true; settings.show_banner = false; }; + fd.enable = true; }; services = { @@ -489,6 +491,13 @@ in { }; }; + qt.kde.settings = { + kwalletrc = { + KSecretD.Enabled = false; + Wallet."Default Wallet" = "store"; + }; + }; + xsession.preferStatusNotifierItems = true; xresources.properties = import ./xresources.nix; @@ -509,7 +518,6 @@ in { nerd-fonts.symbols-only nerd-fonts.fira-code powerline-fonts swtpm (hunspellWithDicts (with hunspellDicts; [en_GB-large de_DE])) libation - # synadm ] ++ mapAttrsToList (_name: pkg: pkgs.callPackage pkg {}) (customUtils.nixImport { dir = ./utils; }); file = { @@ -589,6 +597,8 @@ in { xdg.dataFile = { "dbus-1/services/org.keepassxc.KeePassXC.service".source = "${wrappedKeepassxc}/share/dbus-1/services/org.keepassxc.KeePassXC.service"; "dbus-1/services/org.freedesktop.secrets.service.service".source = "${wrappedKeepassxc}/share/dbus-1/services/org.freedesktop.secrets.service.service"; + "dbus-1/services/org.kde.kwalletd6.service".source = "${pkgs.kdePackages.kwallet}/share/dbus-1/org.kde.kwalletd6.service"; + "dbus-1/services/org.kde.kwalletd5.service".source = "${pkgs.kdePackages.kwallet}/share/dbus-1/org.kde.kwalletd5.service"; "emoji-data/list.txt".source = pkgs.stdenv.mkDerivation { inherit (sources.emoji-data) pname src; version = lib.removePrefix "v" sources.emoji-data.version; diff --git a/accounts/gkleen@sif/niri/default.nix b/accounts/gkleen@sif/niri/default.nix index 80f63e65..b57e1cc0 100644 --- a/accounts/gkleen@sif/niri/default.nix +++ b/accounts/gkleen@sif/niri/default.nix @@ -533,6 +533,9 @@ in { SDL_VIDEODRIVER = "wayland"; DISPLAY = ":0"; ELECTRON_OZONE_PLATFORM_HINT = "auto"; + SSH_ASKPASS_REQUIRE = "prefer"; + SSH_ASKPASS = lib.getExe pkgs.kdePackages.ksshaskpass; + SUDO_ASKPASS = lib.getExe pkgs.kdePackages.ksshaskpass; })) (node "output" "eDP-1" [ diff --git a/accounts/gkleen@sif/synadm/default.nix b/accounts/gkleen@sif/synadm/default.nix new file mode 100644 index 00000000..0a8e0d4c --- /dev/null +++ b/accounts/gkleen@sif/synadm/default.nix @@ -0,0 +1,9 @@ +{ config, pkgs, ... }: +{ + home.packages = with pkgs; [ synadm ]; + sops.secrets."synadm.yaml" = { + format = "binary"; + sopsFile = ./synadm_yaml; + path = config.xdg.configHome + "/synadm.yaml"; + }; +} diff --git a/accounts/gkleen@sif/synadm/synadm_yaml b/accounts/gkleen@sif/synadm/synadm_yaml new file mode 100644 index 00000000..8d951ccc --- /dev/null +++ b/accounts/gkleen@sif/synadm/synadm_yaml @@ -0,0 +1,15 @@ +{ + "data": "ENC[AES256_GCM,data:qJy4Pmbbxja4jmW7OaHsD0mQZ7anZwLhiVmAgkavb+CqwWGDnUBXdz22/MHCbxng5NshcFSpBoCBhgY6B9V2bUiES6bH9AtMlDcs9ebKGMArBTUTnQ2MjWQGfQTqraWdNgy+n327uj9swwCH8EZXdYH/Hlv0t/re470W+VOHeXhGghQ3Y9IGz2sgfvMGr8QxaJNydZz85rgs5QUP/PglCwWIOw2mY1EX2vYwnmiAo49LmIEaxWvRi++KHaeBveDt0nlkJwzUlipL2VOKWxkgpK3yGucQn2mz+FRe1btp+4KGm8H17eUI9FO9sBwq,iv:kgM921ovwCgDYHQj3c5Rupy/8JxHehxUD2jb1k9Ik2Y=,tag:3TLQkJbv679VWy8V2TMugw==,type:str]", + "sops": { + "age": [ + { + "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6bzVHUGNxZTF2WC9MYmZr\neGdVVzJXN3lGdEk3cTBER3J6UTFtcUJna2d3CjdNQmRXd2haZW1MYlJzNkk1dWVD\nVTFQc2gvS0JrejJ6SFh2MXpPWDZpRE0KLS0tIE0wTC85bEpvSnlGdGFkZVFhNjFZ\nbzRiZkxMWUg2ODNVUlBmNFlPNGRrZlkK1VXLJWcssv3ETyZSSM/Hhn5VIaI9iov9\nzShZA9Zx/FX6PYTuUMC29pJ57gKourcIxa/7HwSv/xYn1A6WcYfgSg==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-05-18T11:03:42Z", + "mac": "ENC[AES256_GCM,data:yonJC68PhilAgEHNNJQ8nO53Qo3rx/LnfiOWfuMm24bOUIH9QM3WZZxpigd7bHI4eC4TqRb4LvcSi0nEURTRAhwiTqGNrWbpw2Iv3n5dhLEN9aTcetG5ZuhaXqfVUoML45/ovdBZG/0l8+XIHqxN2M/g/h4JwKoR/6lqzcrVhgo=,iv:xvxBJwy+E5zUdjhGPdZPdy7tnBIEj50hfiDJFsS3wNg=,tag:L4Fas36ZOg4h0QQwC4gjNA==,type:str]", + "unencrypted_suffix": "_unencrypted", + "version": "3.10.2" + } +} -- cgit v1.2.3