53 lines
1.3 KiB
Nix
53 lines
1.3 KiB
Nix
{ lib
|
|
, browserpass
|
|
, bash
|
|
, fetchFromGitea
|
|
, gnused
|
|
, sane-scripts
|
|
, sops
|
|
, stdenv
|
|
, substituteAll
|
|
}:
|
|
|
|
let
|
|
sane-browserpass-gpg = stdenv.mkDerivation {
|
|
pname = "sane-browserpass-gpg";
|
|
version = "0.1.0";
|
|
src = ./.;
|
|
|
|
inherit bash gnused sops;
|
|
sane_secrets_unlock = sane-scripts.secrets-unlock; # XXX: must be snake_case
|
|
installPhase = ''
|
|
mkdir -p $out/bin
|
|
substituteAll ${./sops-gpg-adapter} $out/bin/gpg
|
|
chmod +x $out/bin/gpg
|
|
ln -s $out/bin/gpg $out/bin/gpg2
|
|
'';
|
|
|
|
};
|
|
in
|
|
browserpass.overrideAttrs (upstream: {
|
|
src = fetchFromGitea {
|
|
domain = "git.uninsane.org";
|
|
owner = "colin";
|
|
repo = "browserpass-native";
|
|
# don't forcibly append '.gpg'
|
|
rev = "d3ef88e12cb127914fb0ead762b7baee6913592f";
|
|
hash = "sha256-FRnFmCJI/1f92DOI1VXSPivSBzIR372gmgLUfLLiuPc=";
|
|
};
|
|
installPhase = ''
|
|
make install
|
|
|
|
wrapProgram $out/bin/browserpass \
|
|
--prefix PATH : ${lib.makeBinPath [ sane-browserpass-gpg ]}
|
|
|
|
# This path is used by our firefox wrapper for finding native messaging hosts
|
|
mkdir -p $out/lib/mozilla/native-messaging-hosts
|
|
ln -s $out/lib/browserpass/hosts/firefox/*.json $out/lib/mozilla/native-messaging-hosts
|
|
'';
|
|
|
|
passthru = (upstream.passthru or {}) // {
|
|
inherit sane-browserpass-gpg;
|
|
};
|
|
})
|