From 49d8457f4aaa2416cc36658dc2faab47b5e0f690 Mon Sep 17 00:00:00 2001
From: Leonardo <noreply@leoflo.me>
Date: Wed, 25 Feb 2026 17:24:02 +0100
Subject: keepassxc come secret manager

---
 hermes/home-manager/leo/programs/default.nix   | 12 ++++++----
 hermes/home-manager/leo/programs/keepassxc.nix | 33 ++++++++++++++++++++++++++
 2 files changed, 41 insertions(+), 4 deletions(-)
 create mode 100644 hermes/home-manager/leo/programs/keepassxc.nix

(limited to 'hermes/home-manager/leo/programs')

diff --git a/hermes/home-manager/leo/programs/default.nix b/hermes/home-manager/leo/programs/default.nix
index 5c961c9..f19a4dc 100644
--- a/hermes/home-manager/leo/programs/default.nix
+++ b/hermes/home-manager/leo/programs/default.nix
@@ -1,15 +1,19 @@
 {...}: {
   imports = [
+    ./keepassxc.nix
+    ./alacritty.nix
+    ./zed.nix
+
     ./zsh.nix
     ./tmux.nix
     ./fastfetch.nix
-    ./alacritty.nix
-    ./zed.nix
   ];
 
+  keepassxc.enable = true;
+  alacritty.enable = true;
+  zed.enable = true;
+
   zsh.enable = true;
   tmux.enable = true;
   fastfetch.enable = true;
-  alacritty.enable = true;
-  zed.enable = true;
 }
diff --git a/hermes/home-manager/leo/programs/keepassxc.nix b/hermes/home-manager/leo/programs/keepassxc.nix
new file mode 100644
index 0000000..a741376
--- /dev/null
+++ b/hermes/home-manager/leo/programs/keepassxc.nix
@@ -0,0 +1,33 @@
+{lib, config, ...}: {
+  options.keepassxc.enable = lib.mkEnableOption "keepassxc config";
+
+  config = lib.mkIf config.keepassxc.enable {
+    xdg.autostart.enable = true;
+
+    programs.keepassxc = {
+      enable = true;
+      autostart = true;
+
+      settings = {
+        Browser.Enabled=true;
+        FdoSecrets.Enabled = true;
+
+        GUI = {
+          MinimizeOnStartup = true;
+          MinimizeOnClose = true;
+
+          ApplicationTheme = "dark";
+          HideUsernames = true;
+          TrayIconAppearance = "monochrome-light";
+        };
+
+        PasswordGenerator = {
+          Length = 128;
+          LowerCase = true;
+          UpperCase = true;
+          SpecialChars = true;
+        };
+      };
+    };
+  };
+}
-- 
cgit v1.3