All my system configs and packages in one repo
1password: minor config & module changes
+6
-8
+1
-5
hm-modules/hm-plus/programs/1password.nix
+1
-5
hm-modules/hm-plus/programs/1password.nix
···
58
58
Note that setting `sshAgent.enabled` in these settings also enables the 1Password SSH agent automatically.
59
59
'';
60
60
};
61
-
62
-
sshAgent.enable = mkEnableOption "1Password's SSH agent";
63
61
};
64
62
config = mkIf cfg.enable {
65
63
home.packages =
···
75
73
format.generate "1password-settings.json"
76
74
(pathify ({ version = 1; } // cfg.settings));
77
75
78
-
programs = mkIf cfg.sshAgent.enable {
79
-
_1password.settings.sshAgent.enabled = true;
80
-
76
+
programs = mkIf cfg.settings.sshAgent.enabled {
81
77
git.signer = getExe' cfg.package "op-ssh-sign";
82
78
ssh.enable = mkDefault true;
83
79
ssh.extraConfig = "IdentityAgent ${config.home.homeDirectory}/.1password/agent.sock";
+5
-3
users/leah/programs/1password/default.nix
+5
-3
users/leah/programs/1password/default.nix
···
23
23
24
24
autostart = true;
25
25
26
-
sshAgent.enable = true;
27
-
28
26
settings = {
29
27
app.useHardwareAcceleration = true;
30
28
advanced.EnableDebuggingTools = true;
···
32
30
security = {
33
31
# Use system auth (PolKit) to unlock 1Pass
34
32
authenticatedUnlock.enabled = true;
35
-
# Lock 1Pass on sleep/hibernate/lock/whatever
36
33
autolock.onDeviceLock = true;
37
34
};
38
35
···
43
40
developers.cliSharedLockState.enabled = true;
44
41
45
42
sshAgent = {
43
+
enabled = true;
44
+
46
45
# Ask approval for each new application.
47
46
# (1Pass misspelled it, not me.)
48
47
sshAuthorizatonModel = "application";
48
+
49
49
# Display key names when authorizing connections
50
50
storeKeyTitles = true;
51
51
storeSshKeyTitlesResponseGiven = true;
52
52
authPromptsV2.enabled = true;
53
+
54
+
sshSessionDuration = "lock";
53
55
};
54
56
55
57
# Scan disk for dev credentials