modules/keepassxc.nix

{
  pkgs,
  home,
  config,
  username,
  ...
}: {
  home = {
    home.packages = [pkgs.keepassxc];
    wayland.windowManager.sway.config.startup = [
      {
        command = builtins.replaceStrings ["\n"] [" "] ''
          ${pkgs.coreutils}/bin/cat
          ${config.sops.secrets.keepassPassword.path} |
          ${pkgs.keepassxc}/bin/keepassxc --pw-stdin
          ${home.home.homeDirectory}/Sync/KeePass\ Vaults/Passwords.kdbx
        '';
      }
    ];
  };
  config = {
    environment.persistence."/nix/persist".users.${username}.directories = [
      ".config/keepassxc"
    ];
    sops.secrets.keepassPassword = {
      mode = "0400";
      owner = config.users.users.${username}.name;
      group = config.users.users.nobody.group;
    };
  };
}