semere/dotfiles-nix
1
0
Fork 0
mirror of https://github.com/semere-meb/dotfiles-nix.git synced 2026-08-03 10:24:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

KeePassXC fully integrated: passwords, browser integration, ssh, & service

Browse source
This commit is contained in:
Semere Meharena Mebrahtom 2026-07-26 23:56:35 +02:00
parent a8bc48adc0
commit d74cd9b87c
No known key found for this signature in database
7 changed files with 71 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/default.nix
View file

@ -22,6 +22,7 @@ allModules
self.nixosModules.starship
self.nixosModules.git
self.nixosModules.gpg
self.nixosModules.keepassxc
self.nixosModules.zsh
self.nixosModules.helix
self.nixosModules.zen-browser

10
modules/git.nix
View file

@ -6,6 +6,9 @@
...
}:
let
useSshSigning = userVars ? sshKey && userVars.sshKey != "";
in
{
home-manager.users."${userVars.username}" = {
programs.git = {
@ -16,10 +19,13 @@
email = userVars.email;
};
commit.gpgsign = true;
} // (if useSshSigning then {
gpg.format = "ssh";
} else {
gpg.program = "gpg";
};
});
signing = {
key = userVars.gpgKey;
key = if useSshSigning then userVars.sshKey else userVars.gpgKey;
signByDefault = true;
};
};

6
modules/gpg.nix
View file

@ -10,7 +10,7 @@
environment.systemPackages = with pkgs; [
gnupg
pass
pinentry-gnome3
# pinentry-gnome3
];
home-manager.users."${userVars.username}" = {
@ -20,8 +20,8 @@
defaultCacheTtlSsh = 7200;
maxCacheTtl = 28800;
maxCacheTtlSsh = 28800;
enableSshSupport = true;
pinentry.package = pkgs.pinentry-gnome3;
enableSshSupport = false;
# pinentry.package = pkgs.pinentry-gnome3;
};
};
}

53
modules/keepassxc.nix Normal file
View file

@ -0,0 +1,53 @@
{
config,
lib,
pkgs,
userVars,
...
}:
{
# Install KeePassXC globally.
environment.systemPackages = with pkgs; [
keepassxc
];
# Disable GNOME Keyring to prevent it from conflicting with KeePassXC's Secret Service Integration.
services.gnome.gnome-keyring.enable = false;
# Enable the standard system-level SSH agent.
programs.ssh.startAgent = true;
home-manager.users."${userVars.username}" = {
# Disable GNOME Keyring in Home Manager as well.
services.gnome-keyring.enable = false;
# Disable automatic keys addition to standard SSH agent using the modern settings option.
programs.ssh = {
enable = true;
enableDefaultConfig = false;
settings = {
"*" = {
AddKeysToAgent = "no";
};
};
};
# Configure KeePassXC native messaging hosts for Firefox and Zen Browser.
# This enables the browser extension to communicate with KeePassXC.
home.file = {
# ".mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json".text = builtins.toJSON {
# allowed_extensions = [ "keepassxc-browser@keepassxc.org" ];
# description = "KeePassXC integration with Mozilla Firefox";
# name = "org.keepassxc.keepassxc_browser";
# path = "${pkgs.keepassxc}/bin/keepassxc-proxy";
# type = "stdio";
# };
# ".config/zen/native-messaging-hosts/org.keepassxc.keepassxc_browser.json".text = builtins.toJSON {
# allowed_extensions = [ "keepassxc-browser@keepassxc.org" ];
# description = "KeePassXC integration with Zen Browser";
# name = "org.keepassxc.keepassxc_browser";
# path = "${pkgs.keepassxc}/bin/keepassxc-proxy";
# type = "stdio";
# };
};
};
}

5
modules/zen-browser.nix
View file

@ -29,6 +29,11 @@
installation_mode = "force_installed";
install_url = "https://addons.mozilla.org/firefox/downloads/latest/vimium-ff/latest.xpi";
};
# KeePassXC-Browser
"keepassxc-browser@keepassxc.org" = {
installation_mode = "force_installed";
install_url = "https://addons.mozilla.org/firefox/downloads/latest/keepassxc-browser/latest.xpi";
};
};
};

3
modules/zsh.nix
View file

@ -21,9 +21,6 @@
dotDir = "/home/${userVars.username}/.config/zsh";
initContent = ''
# -- GPG / SSH Configuration --
export SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
# Import Wayland environment to systemd for GUI tools (like pinentry-gnome3)
if [ -n "$WAYLAND_DISPLAY" ]; then
systemctl --user import-environment WAYLAND_DISPLAY DISPLAY DBUS_SESSION_BUS_ADDRESS 2>/dev/null