:PROPERTIES:
:ID: 09ae970c-2995-43d9-a597-47bb904c98de
:END:

#+title: azos/pass
#+filetags: :project: :knowledge: :pass:

* azos/pass

Password store conventions and path mappings for lauretta.

See root: [[id:bf4dde56-0967-4374-94ed-771301e47c66][azos]]

** Format

The store was migrated (2026-07-25) from a nested path scheme to a flat layout.
Each entry is =domain.com= with the password on line 1 and =login:= on line 2:

#+begin_example
<PASSWORD>
login: user@example.com
#+end_example

** Conventions

- All =passwordCommand= fields in Nix/mbsync configs must pipe through =| head -1= to extract only the password line
- =pass-git-helper= handles multi-line entries natively — no =head -1= needed there
- mbsync app passwords live under the =mbsync/= namespace to keep them separate from account passwords

** Path Mappings

| Service | pass path | Config location |
|---------+-----------+-----------------|
| Gmail mbsync | =mbsync/anerisgreat@gmail.com= | =features/mail/default.nix= |
| BGU mbsync | =mbsync/anerz@post.bgu.ac.il= | =features/mail/default.nix= |
| Zakobar mail (privateemail.com) | =privateemail.com= | =features/mail/default.nix= |
| Nextcloud / caldav | =zakobar.com= | =features/lauretta/emacs/config.org= |
| Git credentials (zakobar.com) | =zakobar.com= | =features/git-config/pass-git-mapping.ini= |

** Pending

- =mbsync/anerisgreat@gmail.com= and =mbsync/anerz@post.bgu.ac.il= entries not yet created in the store — mail sync will fail until these are added via =pass insert=