add keepassxc

native_configs/ssh/authorized_keys

@@ -5,3 +5,4 @@ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFQN5Ia8rTalnQgcvdxH2n7UNNT1Tq9UvNdJeg9ziJ
 ssh-rsa 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 hwtr@hwtr-prince
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/UzKwmFsAlLoCXvOq2lsC1sr1BRDW5uPkdcYUfQ7z4JowL/pscoTV9zjfJd1hPBvHLBvn7gs7gWt0wNnJfD1Oor26VreHjhi1PZE2kovrEzjmPoz+GqMPciV+HF9XNIRwDiHlUNFPt9qJjAJXJCFhzcmT9q0JQuPlNgJtQ6+By7RgPuJczpf17IbxpheLcXqtOFcTHyRT01KijIPhAtWRlmG5dahVuu50EfpmHRYZ8nCJJqkuJ6uRbFaPE6mYLnXLSzJUdyakYnzWbCd5phpoGAuFyQZnS503CFZUOFCnNEN8QfO2DXihp7lvrzzpI6PgcpvpotSo9kYFiEuB+DRlBQcVMWL0lUk2J1JHJH83y3CxwH0pUc7E1k6FAZE4pv4x0KEvbZSvmb8jAGWZkn4HvZCwXR5wGVi22s6RCdIHvR2PCpAy+ZSjpM+2FJIqDHpxY/vo3ktM9rpeCSwp14F/iiw6nanVq/KZBpCZ2paMcAU4WreCFZiPdGsdiixYlts= hungtr@bao
 ssh-rsa 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 nixos@Felia
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJvOCZ4nyFiiKK7gkwzP4hXJ6NmtgbdUJdWgIzUL0GMA htran@Hungs-MacBook-Pro.local

nix-conf/home-manager/htran/nix.conf

@@ -4,3 +4,6 @@ post-build-hook = /etc/nix/upload-to-cache.sh
 trusted-users = root htran hungtran hwtr
 max-jobs = 8
 cores = 12
+# default is true for Linux, false for every one else 
+# https://nixos.org/manual/nix/stable/command-ref/conf-file.html#conf-sandbox
+sandbox = true

nix/repo/home-configs/default.nix

@@ -49,6 +49,7 @@ in {
             home.homeDirectory = "/Users/htran";
             home.stateVersion = "23.11";
           }
+          home-profiles.passman
         ];
     };
   };

nix/repo/home-profiles/default.nix

@@ -209,4 +209,10 @@ in {
       inputs.nixpkgs.zk
     ];
   };
+
+  passman = {
+    # Bruh, keepassxc on Darwin doesn't contain cli
+    # On Linux, however, it correctly gives `keepassxc-cli`
+    home.packages = [cell.packages.kpxc];
+  };
 }

nix/repo/packages/default.nix

@@ -1,6 +1,37 @@
 {
   inputs,
   cell,
-}: {
+}: let
+  pkgs = inputs.nixpkgs;
+in {
   inherit (inputs.cells.dotfiles.packages) kpcli-py;
+  kpxc = let
+    inherit (pkgs) keepassxc;
+  in
+    pkgs.stdenv.mkDerivation {
+      pname = "keepassxc-darwin";
+      version = keepassxc.version;
+
+      phases = ["installPhase"];
+      installPhase = ''
+        mkdir -p $out/bin
+        cp -r ${keepassxc}/* $out/
+
+        ${
+          if pkgs.stdenv.hostPlatform.isDarwin
+          then ''
+            for exe in $(find $out/Applications/KeePassXC.app/Contents/MacOS/ -type f -executable); do
+              exe_name=$(basename $exe)
+              ln -s $exe $out/bin/$exe_name
+            done
+          ''
+          else ""
+        }
+      '';
+      meta =
+        keepassxc.meta
+        // {
+          description = "Wrapper for keepassxc and keepassxc-cli with additional Darwin-specific fixes";
+        };
+    };
 }