Nextcloud sync, also zapzap

2026-10-11 09:22:42 +03:00
parent 0ea6d168fd
commit 04427ddcda
5 changed files with 85 additions and 13 deletions
@@ -11,4 +11,14 @@
      config.allowUnfree = true;
    };
  };
+
+  # Shared silent presence check for the GPG smartcard (the YubiKey's OpenPGP
+  # applet): `gpg --card-status` only queries the reader, never invoking
+  # pinentry, so it's safe to poll without ever producing a "please insert
+  # card" prompt. Used by both the mail sync timer and the Nextcloud mount
+  # service to gate on `pass` being decryptable.
+  config.flake.overlayPkgs.azos-card-present = pkgs:
+    pkgs.writeShellScriptBin "azos-card-present" ''
+      exec ${pkgs.gnupg}/bin/gpg --card-status >/dev/null 2>&1
+    '';
 }