refactor: use systemd.tmpfiles for GNOME Keyring, simplify reset scripts

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/71dab9c7-081f-4e45-80c2-080e88ae6207

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-30 13:52:27 +00:00
committed by GitHub
parent 953fb04671
commit c450dcab9e
3 changed files with 32 additions and 76 deletions
+9
View File
@@ -70,6 +70,15 @@
security.pam.services.gdm-password.enableGnomeKeyring = true;
security.pam.services.gdm-autologin.enableGnomeKeyring = true;
# Declaratively guarantee the GNOME Keyring default pointer exists.
# The 'f' directive creates the file only when it is absent, so legacy
# machines that already have a valid pointer are never overwritten.
# The content 'login' tells pam_gnome_keyring which keyring to unlock on login.
systemd.tmpfiles.rules = [
"d /home/free/.local/share/keyrings 0700 free free -"
"f /home/free/.local/share/keyrings/default 0600 free free - login"
];
# ── Audio ──────────────────────────────────────────────────
services.pulseaudio.enable = false;
security.rtkit.enable = true;