Secret Service: Difference between revisions
mNo edit summary |
Elvetemedve (talk | contribs) Describe how to setup KeepassXC as Secret Service declaratively. Also added note about how to disable conflicting Gnome Keyring Daemon. |
||
| Line 40: | Line 40: | ||
=== KeePassXC === | === KeePassXC === | ||
KeePassXC's Secret Service integration can be enabled by going into the | KeePassXC's Secret Service integration can be enabled by going into the '''Tools > Settings''', opening the ''Secret Service Integration'' tab and enabling it. | ||
This can be configured automatically by [[Home Manager]] configuration:{{file|||<nowiki> | |||
{ pkgs, ... }: | |||
{ | |||
programs.keepassxc = { | |||
autostart = true; | |||
enable = true; | |||
settings = { | |||
# For available settings, see https://github.com/keepassxreboot/keepassxc/blob/develop/src/core/Config.cpp | |||
FdoSecrets.Enabled = true; # Enable Secret Service Integration | |||
}; | |||
}; | |||
{{ | xdg.autostart.enable = true; # Enable creation of XDG autostart entries. | ||
} | |||
</nowiki>|name=home.nix|lang=nix}} | |||
Databases needs to be configured for Secret Service integration by opening their settings '''Database > Database Settings...''', opening the ''Secret Service Integration'' tab and selecting a group for Secret Service entries. | |||
{{Warning|"Another secret service is running (...). Please stop/remove it before re-enabling the Secret Service Integration."}} | |||
If you see a warning like above, you need to find out which other service is currently registered:<syntaxhighlight lang="shell"> | |||
busctl --user status org.freedesktop.secrets | |||
</syntaxhighlight>If it's the Gnome Keyring Daemon, then it can be disabled by this configuration below:{{file|||<nowiki> | |||
{ config, pkgs, lib, ... }: | |||
{ | |||
services.gnome.gnome-keyring.enable = lib.mkForce false; | |||
} | |||
</nowiki>|name=/etc/nixos/configuration.nix|lang=nix}} | |||
=== pass-secret-service === | === pass-secret-service === | ||