feat(desktop): provide Secret Service via gnome-keyring

Bare Wayland session ships no `org.freedesktop.secrets` provider, so libsecret/qtkeychain apps can't persist credentials. Run gnome-keyring and unlock it at the greetd login via PAM. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-07 08:18:59 +02:00
parent 213d2d0b5b
commit 238528f961
2 changed files with 8 additions and 0 deletions
@@ -92,6 +92,10 @@
    };
  };

+  # Unlock the login keyring with the login password at the greetd prompt,
+  # so the Secret Service is open without a second passphrase.
+  security.pam.services.greetd.enableGnomeKeyring = true;
+
  # XDG portals (screen sharing, file pickers, and so on).
  xdg.portal = {
    enable = true;