Secret Service: Difference between revisions

Axka (talk | contribs)
mNo edit summary
Describe how to setup KeepassXC as Secret Service declaratively. Also added note about how to disable conflicting Gnome Keyring Daemon.
 
Line 40: Line 40:
=== KeePassXC ===
=== KeePassXC ===


KeePassXC's Secret Service integration can be enabled by going into the settings, opening the ''Secret Service Integration'' tab and enabling it.
KeePassXC's Secret Service integration can be enabled by going into the '''Tools > Settings''', opening the ''Secret Service Integration'' tab and enabling it.


Databases needs to be configured for Secret Service integration by opening their settings, opening the ''Secret Service Integration'' tab and selecting a group for Secret Service entries.
This can be configured automatically by [[Home Manager]] configuration:{{file|||<nowiki>
{ pkgs, ... }:
{
  programs.keepassxc = {
    autostart = true;
    enable = true;
    settings = {
      # For available settings, see https://github.com/keepassxreboot/keepassxc/blob/develop/src/core/Config.cpp
      FdoSecrets.Enabled = true; # Enable Secret Service Integration
    };
  };


{{Expansion|Missing socket activation instructions.}}
  xdg.autostart.enable = true; # Enable creation of XDG autostart entries.
}
</nowiki>|name=home.nix|lang=nix}}
 
Databases needs to be configured for Secret Service integration by opening their settings '''Database > Database Settings...''', opening the ''Secret Service Integration'' tab and selecting a group for Secret Service entries.
 
{{Warning|"Another secret service is running (...). Please stop/remove it before re-enabling the Secret Service Integration."}}
 
If you see a warning like above, you need to find out which other service is currently registered:<syntaxhighlight lang="shell">
busctl --user status org.freedesktop.secrets
</syntaxhighlight>If it's the Gnome Keyring Daemon, then it can be disabled by this configuration below:{{file|||<nowiki>
{ config, pkgs, lib, ... }:
{
  services.gnome.gnome-keyring.enable = lib.mkForce false;
}
</nowiki>|name=/etc/nixos/configuration.nix|lang=nix}}


=== pass-secret-service ===
=== pass-secret-service ===