50 lines
1.2 KiB
Nix
50 lines
1.2 KiB
Nix
{ username, ... }:
|
|
{
|
|
home-manager.users.${username} = {
|
|
home.file = {
|
|
# Configuration for 1password SSH Agent.
|
|
".ssh/config".text = ''
|
|
Host *
|
|
IdentityAgent ~/.1password/agent.sock
|
|
|
|
# Host git.swaphb.dev
|
|
# HostName swaphb.dev
|
|
# Port 23231
|
|
# '';
|
|
|
|
# Configure 1password to handle SSH commit signing
|
|
".gitconfig".text = ''
|
|
[user]
|
|
name = "Stephen Bryant"
|
|
email = s@swaphb.com
|
|
signingkey = ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJx0WMlfx+AwcROXFO+/all/WkLvBKpEkjwRY15tjSiB
|
|
|
|
[gpg]
|
|
format = ssh
|
|
|
|
[gpg "ssh"]
|
|
program = "/run/current-system/sw/bin/op-ssh-sign"
|
|
|
|
[commit]
|
|
gpgsign = true
|
|
'';
|
|
};
|
|
};
|
|
|
|
# Enable 1password plugins on interactive shell init
|
|
programs.bash.interactiveShellInit = ''
|
|
source /home/${username}/.config/op/plugins.sh
|
|
'';
|
|
|
|
# Enable 1password and the CLI
|
|
programs = {
|
|
_1password.enable = true;
|
|
_1password-gui = {
|
|
enable = true;
|
|
polkitPolicyOwners = [ "${username}" ];
|
|
};
|
|
};
|
|
|
|
# Enable 1password to open with gnomekeyring
|
|
security.pam.services."1password".enableGnomeKeyring = true;
|
|
} |