nixos/home/pass.nix

{ config, pkgs, ... }:

{
  home.packages = [ pkgs.pinentry ];
  programs = {
    gpg.enable = true;
    password-store = {
      enable = true;
      package = pkgs.pass-nodmenu.withExtensions
        (exts: with exts; [ pass-otp pass-update pass-audit pass-import ]);
      settings.PASSWORD_STORE_DIR = with config.home;
        "${homeDirectory}/.password-store";
    };
  };
  services = {
    gpg-agent = rec {
      enable = true;
      maxCacheTtl = 86400;
      defaultCacheTtl = maxCacheTtl;
      defaultCacheTtlSsh = maxCacheTtl;
      pinentryFlavor = "gtk2";
      extraConfig = ''
        no-allow-external-cache
        allow-emacs-pinentry
        allow-loopback-pinentry
      '';
    };
    password-store-sync.enable = true;
  };
}