This repository has no description
483 B
21 lines
1{ pkgs, ... }:
2
3{
4 users.users.mainUser.packages = with pkgs; [
5 (pass.withExtensions (ext: [ ext.pass-otp ]))
6 gnupg
7 (pkgs.writers.writeDashBin "unlock" ''
8 set -efu
9 HOST=$1
10
11 pw=$(pass show "admin/$HOST/luks")
12 torify sshn root@$(pass "hosts/$HOST/initrd/hostname") "echo $pw > /crypt-ramfs/passphrase"
13 '')
14 ];
15
16 programs.gnupg.agent.enable = true;
17 systemd.tmpfiles.rules = [
18 "L+ /home/lass/.password-store - - - - sync/pwstore"
19 ];
20
21}