mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(poppy): use terminal pinentry for personal pass store

Browse source
This commit is contained in:
mikl 2026-09-29 02:07:15 +03:00
commit 7345251aad
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
home/pass.nix
View file

@ -16,9 +16,13 @@
# GPG agent settings (only for GPG/pass, NOT for SSH) # GPG agent settings (only for GPG/pass, NOT for SSH)
services.gpg-agent = { services.gpg-agent = {
enable = true; enable = true;
# Neither gpg-agent nor pinentry-mac/Keychain may cache passphrases. # Require a typed passphrase for the personal store on every decrypt.
# pinentry-mac can silently retrieve it from Keychain even with TTL=0.
defaultCacheTtl = 0; defaultCacheTtl = 0;
maxCacheTtl = 0; maxCacheTtl = 0;
extraConfig = "no-allow-external-cache"; extraConfig = ''
no-allow-external-cache
pinentry-program ${pkgs.pinentry-curses}/bin/pinentry-curses
'';
}; };
} }