add gpg auto-unlock
This commit is contained in:
parent
a8a8be5a59
commit
c5e919a2dc
30
scripts/_gpg-unlock.nix
Normal file
30
scripts/_gpg-unlock.nix
Normal file
|
@ -0,0 +1,30 @@
|
|||
{ config, pkgs, lib, ... }:
|
||||
pkgs.writeShellScriptBin "_gpg-unlock" ''
|
||||
${pkgs.gnupg}/bin/gpg-connect-agent reloadagent /bye
|
||||
|
||||
set -xe
|
||||
|
||||
test -f "$HOME/.config/.preset-password" || {
|
||||
notify-send "No preset password found"
|
||||
exit 0;
|
||||
}
|
||||
|
||||
get_keygrip() {
|
||||
${pkgs.gnupg}/bin/gpg --list-secret-keys --with-keygrip |
|
||||
awk '
|
||||
/^ssb/ {
|
||||
ssb=1
|
||||
}
|
||||
/Keygrip/{
|
||||
if (ssb) print $3
|
||||
}'
|
||||
}
|
||||
|
||||
keygrip=$(get_keygrip)
|
||||
|
||||
test -n "$keygrip" || exit 0
|
||||
|
||||
cat "$HOME/.config/.preset-password" |
|
||||
base64 -d |
|
||||
${pkgs.gnupg}/libexec/gpg-preset-passphrase --preset "$keygrip"
|
||||
''
|
|
@ -6,4 +6,5 @@
|
|||
terminal = import ./terminal.nix { inherit config pkgs lib; };
|
||||
wpass = import ./wpass.nix { inherit config pkgs lib; };
|
||||
screenshotsh = import ./screenshotsh.nix { inherit config pkgs lib; };
|
||||
_gpg-unlock = import ./_gpg-unlock.nix { inherit config pkgs lib; };
|
||||
})
|
||||
|
|
42
user/gpg.nix
Normal file
42
user/gpg.nix
Normal file
|
@ -0,0 +1,42 @@
|
|||
{ config, pkgs, lib, ... }: {
|
||||
config = {
|
||||
services.gpg-agent = {
|
||||
enable = true;
|
||||
defaultCacheTtl = 604800;
|
||||
maxCacheTtl = 604800;
|
||||
pinentryFlavor = "gtk2";
|
||||
extraConfig = ''
|
||||
allow-preset-passphrase
|
||||
allow-loopback-pinentry
|
||||
pinentry-mode loopback
|
||||
'';
|
||||
};
|
||||
systemd.user.services = {
|
||||
gpg_unlock = {
|
||||
Unit = {
|
||||
Description = "Unlock gpg keyring";
|
||||
PartOf = [ "graphical-session.target" ];
|
||||
After = [ "graphical-session.target" ];
|
||||
};
|
||||
Service = {
|
||||
ExecStart = "${pkgs._gpg-unlock}/bin/_gpg-unlock";
|
||||
};
|
||||
};
|
||||
};
|
||||
systemd.user.timers = {
|
||||
gpg_unlock = {
|
||||
Unit = {
|
||||
Description = "Unlock gpg keyring";
|
||||
PartOf = [ "graphical-session.target" ];
|
||||
After = [ "graphical-session.target" ];
|
||||
};
|
||||
Timer = {
|
||||
OnBootSec = "30";
|
||||
OnUnitActiveSec = "30";
|
||||
Unit = "gpg_unlock.service";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
};
|
||||
}
|
|
@ -17,6 +17,7 @@ in {
|
|||
./sway.nix
|
||||
./git.nix
|
||||
./qutebrowser
|
||||
./gpg.nix
|
||||
];
|
||||
# Home Manager needs a bit of information about you and the
|
||||
# paths it should manage.
|
||||
|
@ -54,6 +55,7 @@ in {
|
|||
libnotify
|
||||
wpass
|
||||
screenshotsh
|
||||
_gpg-unlock
|
||||
# media
|
||||
yt-dlp
|
||||
ffmpeg
|
||||
|
|
Loading…
Reference in a new issue