1Password - Revision history

Jopejoe1: Format an clean up the nix code

2026-08-11T13:20:02Z

Format an clean up the nix code

← Older revision		Revision as of 13:20, 11 August 2026
Line 7:		Line 7:
	If you're using [[NixOS]], you can enable 1Password and its GUI with:		If you're using [[NixOS]], you can enable 1Password and its GUI with:
	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
	{ ~~config,~~ lib, ~~pkgs,~~ ... }:		{
			lib,
			...
			}:

	{		{
	# Enable the unfree 1Password packages		# Enable the unfree 1Password packages
	nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [		nixpkgs.config.allowUnfreePredicate =
	"1password-cli"		pkg:
	"1password-gui"		builtins.elem (lib.getName pkg) [
	"1password"		"1password-cli"
	];		"1password-gui"
			"1password"
			];
	# Alternatively, you could also just allow all unfree packages		# Alternatively, you could also just allow all unfree packages
	# nixpkgs.config.allowUnfree = true;		# nixpkgs.config.allowUnfree = true;
Line 25:		Line 31:
	polkitPolicyOwners = [ "yourUsernameHere" ];		polkitPolicyOwners = [ "yourUsernameHere" ];
	};		};
	~~...~~
	}		}
	</nowiki>}}		</nowiki>}}
Line 43:		Line 48:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	environment.etc = {		{
	"1password/custom_allowed_browsers" = {		environment.etc = {
	text = ''		"1password/custom_allowed_browsers" = {
	vivaldi-bin		text = ''
	wavebox		vivaldi-bin
	'';		wavebox
	mode = "0755";		'';
	};		mode = "0755";
	};		};
			};
			}
	</syntaxhighlight>		</syntaxhighlight>

Line 71:		Line 78:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
			{
			pkgs,
			...
			}:

			{
	home.packages = [		home.packages = [
	pkgs._1password		pkgs._1password
	pkgs._1password-gui		pkgs._1password-gui
	];		];
			}
	</syntaxhighlight>		</syntaxhighlight>

Line 88:		Line 102:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
			{
			config,
			pkgs,
			...
			}:

	let		let
	onePassPath = if pkgs.stdenv.isDarwin		onePassPath =
	~~then~~ "${config.home.homeDirectory}/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"		if pkgs.stdenv.isDarwin then
	else "${config.home.homeDirectory}/.1password/agent.sock";		"${config.home.homeDirectory}/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"
	in {		else
			"${config.home.homeDirectory}/.1password/agent.sock";
			in
			{
	home.sessionVariables.SSH_AUTH_SOCK = onePassPath;		home.sessionVariables.SSH_AUTH_SOCK = onePassPath;

Line 111:		Line 134:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
			{
			lib,
			pkgs,
			...
			}:
	{		{
	programs.git = {		programs.git = {

1birkhoff: auto detect onePassPath for darwin / linux, and add SSH_AUTH_SOCK method

2026-04-23T19:10:04Z

auto detect onePassPath for darwin / linux, and add SSH_AUTH_SOCK method

← Older revision		Revision as of 19:10, 23 April 2026
Line 88:		Line 88:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	_: let		let
	# onePassPath = "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock";		onePassPath = if pkgs.stdenv.isDarwin
	~~onePassPath =~~ "~/.1password/agent.sock";		then "${config.home.homeDirectory}/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"
			else "${config.home.homeDirectory}/.1password/agent.sock";
	in {		in {
			home.sessionVariables.SSH_AUTH_SOCK = onePassPath;

			# or, alternatively, set it in `.ssh/config` which has higher precedence:
	programs.ssh = {		programs.ssh = {
	enable = true;		enable = true;

DougRichardson: Instructions failed until I added 1password-cli, so updating.

2026-04-06T22:25:47Z

Instructions failed until I added 1password-cli, so updating.

← Older revision		Revision as of 22:25, 6 April 2026
Line 11:		Line 11:
	# Enable the unfree 1Password packages		# Enable the unfree 1Password packages
	nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [		nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
			"1password-cli"
	"1password-gui"		"1password-gui"
	"1password"		"1password"

Praseodym: Fix broken 1Password Community link

2025-09-08T13:08:41Z

Fix broken 1Password Community link

← Older revision		Revision as of 13:08, 8 September 2025
Line 63:		Line 63:
	== Home Manager ==		== Home Manager ==

	{{warning\|1=Non-[[NixOS]] installs [https://1password.community/~~discussion~~/~~comment~~/~~655813~~/~~#Comment_655813~~ will not link with browser extensions or system authentication] }}		{{warning\|1=Non-[[NixOS]] installs [https://www.1password.community/discussions/1password/sandboxed-application-cant-communicate-with-browser-extension/91984/replies/92015 will not link with browser extensions or system authentication] }}

	=== Installation ===		=== Installation ===

Pigs: /* Unlocking with System Authentication */ don't link to old wiki

2025-06-09T18:31:26Z

Unlocking with System Authentication: don't link to old wiki

← Older revision		Revision as of 18:31, 9 June 2025
Line 57:		Line 57:
	1Password allows [https://support.1password.com/system-authentication-linux/ unlocking with system authentication]. This means fingerprints or login passwords may be used in addition to the master password. This must be enabled under the Security preferences tab of 1Password as outlined in the 1Password documentation, but also requires a few other system tools to work.		1Password allows [https://support.1password.com/system-authentication-linux/ unlocking with system authentication]. This means fingerprints or login passwords may be used in addition to the master password. This must be enabled under the Security preferences tab of 1Password as outlined in the 1Password documentation, but also requires a few other system tools to work.

	For the graphical authentication prompt to work, a user [~~https://nixos.wiki/wiki/~~Polkit#Authentication_agents Polkit authentication agent] must be started. The authentication agent may automatically be started under Gnome, KDE, or other DE at login, but may need to be explicitly enabled for other window managers.		For the graphical authentication prompt to work, a user [[Polkit#Authentication_agents\|Polkit authentication agent]] must be started. The authentication agent may automatically be started under Gnome, KDE, or other DE at login, but may need to be explicitly enabled for other window managers.

	For fingerprint unlocking to work, [~~https://wiki.nixos.org/wiki/Fingerprint_scanner~~ fingerprint scanning] to be enabled and allowed for typical system authentication.		For fingerprint unlocking to work, [[Fingerprint scanner\|fingerprint scanning]] to be enabled and allowed for typical system authentication.

	== Home Manager ==		== Home Manager ==

Hunner: Added details for getting system authentication working

2025-06-09T17:28:15Z

Added details for getting system authentication working

← Older revision		Revision as of 17:28, 9 June 2025
Line 52:		Line 52:
	};		};
	</syntaxhighlight>		</syntaxhighlight>

			=== Unlocking with System Authentication ===

			1Password allows [https://support.1password.com/system-authentication-linux/ unlocking with system authentication]. This means fingerprints or login passwords may be used in addition to the master password. This must be enabled under the Security preferences tab of 1Password as outlined in the 1Password documentation, but also requires a few other system tools to work.

			For the graphical authentication prompt to work, a user [https://nixos.wiki/wiki/Polkit#Authentication_agents Polkit authentication agent] must be started. The authentication agent may automatically be started under Gnome, KDE, or other DE at login, but may need to be explicitly enabled for other window managers.

			For fingerprint unlocking to work, [https://wiki.nixos.org/wiki/Fingerprint_scanner fingerprint scanning] to be enabled and allowed for typical system authentication.

	== Home Manager ==		== Home Manager ==

James Patrick: /* Configuring Git */ Typo Fix

2025-02-17T04:21:51Z

Configuring Git: Typo Fix

← Older revision		Revision as of 04:21, 17 February 2025
Line 95:		Line 95:
	==== Configuring Git ====		==== Configuring Git ====

	You can enable [[Git]]'s [[SSH]] ~~singing~~ with [[Home Manager]]:		You can enable [[Git]]'s [[SSH]] signing with [[Home Manager]]:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">

Mic92: import from old wiki

2024-08-11T14:26:14Z

import from old wiki

← Older revision		Revision as of 14:26, 11 August 2024
Line 75:		Line 75:

	If 1Password manages your [[SSH]] keys and you use [[Home Manager]], you may also configure your <code>~/.ssh/config</code> file using Nix:		If 1Password manages your [[SSH]] keys and you use [[Home Manager]], you may also configure your <code>~/.ssh/config</code> file using Nix:

			{{note\|In order to start the 1Password SSH agent, you must open the 1Password settings, go to the Developer section and check the checkbox "Use the SSH agent".}}

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">

Klinger: Category:Applications (not Software)

2024-06-25T20:32:34Z

Category:Applications (not Software)

← Older revision		Revision as of 20:32, 25 June 2024
Line 119:		Line 119:


	[[Category:~~Software~~]]		[[Category:Applications]]

Tomodachi94: copyedit: restructure headings, add links

2024-06-21T04:46:37Z

copyedit: restructure headings, add links

← Older revision		Revision as of 04:46, 21 June 2024
Line 1:		Line 1:
	[https://1password.com/ 1Password] is a password manager.		[https://1password.com/ 1Password] is a password manager.

	= ~~Using 1Password on~~ NixOS =		== NixOS ==
	If you're using NixOS, you can enable 1Password and its GUI by:
			=== Installation ===

			If you're using [[NixOS]], you can enable 1Password and its GUI with:
	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
	{ config, lib, pkgs, ... }:		{ config, lib, pkgs, ... }:
Line 27:		Line 30:


	== Unlocking ~~Browser Extensions~~ ==		=== Unlocking browser extensions ===

	{{warning\|1=This only works for browsers that are installed via NixOS -- Browsers installed via ~~flatpak~~ are not supported}}		{{warning\|1=This only works for browsers that are installed via [[NixOS]]. Browsers installed via [[Flatpak]] are not supported.}}

	The 1Password app can unlock your browser extension using a special ~~NativeMessaging~~ process. This streamlines your 1Password experience: Once you unlock 1Password from your tray icon, your browser extensions will be unlocked as well.		The 1Password app can unlock your browser extension using a special [https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_messaging native messaging] process. This streamlines your 1Password experience: Once you unlock 1Password from your tray icon, your browser extensions will be unlocked as well.

	This is automatically configured for Firefox, Chrome, and Brave browsers. However, Vivaldi and other custom Chrome-based browsers may not unlock when you unlock 1Password. If you find this to be the case, the solution is to set the <code>/etc/1password/custom_allowed_browsers</code> file as follows:		This is automatically configured for [[Firefox]], [[Chrome]], and [[Brave]] browsers. However, [[Vivaldi]] and other custom Chrome-based browsers may not unlock when you unlock 1Password. If you find this to be the case, the solution is to set the <code>/etc/1password/custom_allowed_browsers</code> file as follows:

	* First, use <code>ps aux</code> to find the application name for the browser. For Vivaldi, this is <code>vivaldi-bin</code>		* First, use <code>ps aux</code> to find the application name for the browser. For Vivaldi, this is <code>vivaldi-bin</code>
	* Add that binary name to <code>/etc/1password/custom_allowed_browsers</code>		* Add that binary name to <code>/etc/1password/custom_allowed_browsers</code>:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
Line 50:		Line 53:
	</syntaxhighlight>		</syntaxhighlight>

			== Home Manager ==

			{{warning\|1=Non-[[NixOS]] installs [https://1password.community/discussion/comment/655813/#Comment_655813 will not link with browser extensions or system authentication] }}

	== ~~1Password, SSH keys and Home Manager~~ ==		=== Installation ===

	~~If 1Password manages~~ your SSH ~~keys and you use~~ [https://~~nix-community~~.~~github~~.io/~~home-manager~~/~~index~~.~~xhtml~~ Home Manager], you may also configure your <code>~/.ssh/config</code> file using Nix:		Add the following to your [[Home Manager]] configuration:

			<syntaxhighlight lang="nix">
			home.packages = [
			pkgs._1password
			pkgs._1password-gui
			];
			</syntaxhighlight>

			=== SSH key management ===

			1Password [https://developer.1password.com/docs/ssh/ can manage SSH keys].

			==== Configuring SSH ====

			If 1Password manages your [[SSH]] keys and you use [[Home Manager]], you may also configure your <code>~/.ssh/config</code> file using Nix:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
Line 70:		Line 91:
	</syntaxhighlight>		</syntaxhighlight>

	== ~~1Password with~~ Git ~~Ssh Signing~~ ==		==== Configuring Git ====

	You can enable ~~git ssh~~ singing with [~~https://nix-community.github.io/home-manager/index.xhtml~~ Home Manager]:		You can enable [[Git]]'s [[SSH]] singing with [[Home Manager]]:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
Line 97:		Line 118:
	</syntaxhighlight>		</syntaxhighlight>

	~~= On non-NixOS installs =~~

	~~{{warning\|1=non-NixOS installs [https://1password.community/discussion/comment/655813/#Comment_655813 will not link with browser extensions or system authentication] }}~~

	~~Home Manager~~

	~~<syntaxhighlight lang="nix">~~
	~~home.packages = [~~
	~~pkgs._1password~~
	~~pkgs._1password-gui~~
	];
	~~</syntaxhighlight>~~

	[[Category:Software]]		[[Category:Software]]