1b5bcae686
New structure:
- home/base/ - Always loaded (shell, cli-tools, secrets)
- home/coding/ - Profile-independent dev tooling (editor, lsp, git, agents)
- home/profiles/ - Freely combinable profiles (gaming, media)
- home/desktop/ - Desktop-only (wm, apps, theme)
- home/server/ - Minimal server stub
Migration sources:
- home/features/cli/ → home/base/{shell,cli-tools,secrets}
- home/features/desktop/hyprland,wayland,rofi → home/desktop/wm/
- home/features/desktop/obsidian,office,webapps,crypto → home/desktop/apps/
- home/features/desktop/fonts,theme,wallpapers → home/desktop/theme/
- gaming.nix split → home/profiles/gaming/{steam,gamescope}
- media.nix split → home/profiles/media/{obs,ffmpeg,yt-dlp,kdenlive,handbrake}
Option namespaces updated:
- features.cli.* → base.shell.* / base.cliTools.* / base.secrets
- features.desktop.* → desktop.wm.* / desktop.apps.* / desktop.theme.*
- features.desktop.gaming → profiles.gaming.*
- features.desktop.media → profiles.media.*
Verified: nix flake check passes (warnings only)
24 lines
571 B
Nix
24 lines
571 B
Nix
# Password store and secrets management via pass-wayland with OTP and import extensions.
|
|
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
with lib; let
|
|
cfg = config.base.secrets;
|
|
in {
|
|
options.base.secrets.enable = mkEnableOption "enable secrets management";
|
|
|
|
config = mkIf cfg.enable {
|
|
programs.password-store = {
|
|
enable = true;
|
|
package =
|
|
pkgs.pass-wayland.withExtensions
|
|
(exts: [exts.pass-otp exts.pass-import]);
|
|
settings = {PASSWORD_STORE_DIR = "$XDG_DATA_HOME/password-store";};
|
|
};
|
|
home.packages = [pkgs.pinentry-gnome3];
|
|
};
|
|
}
|