This repository has no description
519 B
22 lines
1{ pkgs, self, ... }:
2
3{
4 users.users.mainUser.packages = with pkgs; [
5 self.packages.${pkgs.system}.passmenu
6 self.packages.${pkgs.system}.pass
7 gnupg
8 (pkgs.writers.writeDashBin "unlock" ''
9 set -efu
10 HOST=$1
11
12 pw=$(pass show "admin/$HOST/luks")
13 torify sshn root@$(pass "hosts/$HOST/initrd/hostname") "echo $pw > /crypt-ramfs/passphrase"
14 '')
15 ];
16
17 programs.gnupg.agent.enable = true;
18 systemd.tmpfiles.rules = [
19 "L+ /home/lass/.password-store - - - - sync/pwstore"
20 ];
21
22}