home-manager: add `isTrusted`

Install and configure some programs only on trusted machines. On trusted
machines, my mails, GPG and a few other things are configured. A machine
where this is not needed on a regular basis to get things done don't
need that much information.

Also rename `desktop/trust` to `trusted`, in case we want these packages
on a host that is not a desktop, and `trusted` is a better description.

7 files changed, 0 insertions, 150 deletions

diff --git a/users/fcuny/desktop/default.nix b/users/fcuny/desktop/default.nix
index 106e5c9..7450444 100644
--- a/users/fcuny/desktop/default.nix
+++ b/users/fcuny/desktop/default.nix
@@ -9,7 +9,6 @@
     ./scanner-printer
     ./syncthing.nix
     ./terminal.nix
-    ./trust
     ./wm
     ./xdg.nix
     ./theme.nix
diff --git a/users/fcuny/desktop/trust/default.nix b/users/fcuny/desktop/trust/default.nix
deleted file mode 100644
index 575d3e6..0000000
--- a/users/fcuny/desktop/trust/default.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  imports = [
-    ./email.nix
-    ./git.nix
-    ./pass.nix
-    ./pgp.nix
-  ];
-}
diff --git a/users/fcuny/desktop/trust/email.nix b/users/fcuny/desktop/trust/email.nix
deleted file mode 100644
index 3bb6bd2..0000000
--- a/users/fcuny/desktop/trust/email.nix
+++ /dev/null
@@ -1,70 +0,0 @@
-{ pkgs, config, lib, ... }:
-
-{
-  accounts.email = {
-    maildirBasePath = "${config.home.homeDirectory}/.mail";
-    accounts = {
-      Fastmail = rec {
-        primary = true;
-        address = "franck@fcuny.net";
-        userName = address;
-        realName = "Franck Cuny";
-        aliases = [ "franck.cuny@gmail.com" ];
-        passwordCommand = "pass email/imap.fastmail.com";
-        imap.host = "imap.fastmail.com";
-        mbsync = {
-          enable = true;
-          create = "maildir";
-          expunge = "both";
-          extraConfig.channel.CopyArrivalDate = "yes";
-        };
-        notmuch.enable = true;
-      };
-    };
-  };
-
-  programs.mbsync.enable = true;
-
-  programs.afew = {
-    enable = true;
-    extraConfig = ''
-      [SpamFilter]
-      [KillThreadsFilter]
-      [ArchiveSentMailsFilter]
-      [InboxFilter]
-    '';
-  };
-
-  programs.notmuch = {
-    enable = true;
-    maildir.synchronizeFlags = true;
-    new.tags = [ "unread" "inbox" ];
-    new.ignore = [ "Trash" ];
-    search.excludeTags = [ "spam" "deleted" ];
-    hooks = {
-      postNew = "${config.home.profileDirectory}/bin/afew -v --tag --new";
-    };
-  };
-
-  systemd.user.services.mbsync = {
-    Unit = { Description = "mbsync synchronization"; };
-    Service = {
-      Type = "oneshot";
-      Environment = [
-        "PASSWORD_STORE_DIR=${config.programs.password-store.settings.PASSWORD_STORE_DIR}"
-        "NOTMUCH_CONFIG=${config.xdg.configHome}/notmuch/notmuchrc"
-      ];
-      ExecStart = "${pkgs.isync}/bin/mbsync -a";
-      ExecStartPost = "${pkgs.notmuch}/bin/notmuch new --quiet";
-    };
-  };
-
-  systemd.user.timers.mbsync = {
-    Unit = { Description = "mbsync synchronization"; };
-    Timer = {
-      OnBootSec = "30";
-      OnUnitActiveSec = "5m";
-    };
-    Install = { WantedBy = [ "timers.target" ]; };
-  };
-}
diff --git a/users/fcuny/desktop/trust/git-pass-mapping.ini b/users/fcuny/desktop/trust/git-pass-mapping.ini
deleted file mode 100644
index 5c5177b..0000000
--- a/users/fcuny/desktop/trust/git-pass-mapping.ini
+++ /dev/null
@@ -1,9 +0,0 @@
-[DEFAULT]
-line_username=1
-skip_username=10
-
-[github.com/*]
-target=git/github.com
-
-[git.fcuny.net*]
-target=git/git.fcuny.net
diff --git a/users/fcuny/desktop/trust/git.nix b/users/fcuny/desktop/trust/git.nix
deleted file mode 100644
index 52607a3..0000000
--- a/users/fcuny/desktop/trust/git.nix
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  programs.git = {
-    signing = {
-      signByDefault = true;
-      key = "23348B57F01D4234B5CFBA0923208AC01EB6EEA1";
-    };
-  };
-}
diff --git a/users/fcuny/desktop/trust/pass.nix b/users/fcuny/desktop/trust/pass.nix
deleted file mode 100644
index a552318..0000000
--- a/users/fcuny/desktop/trust/pass.nix
+++ /dev/null
@@ -1,35 +0,0 @@
-{ pkgs, config, ... }:
-
-{
-  programs.password-store = {
-    enable = true;
-    settings = {
-      PASSWORD_STORE_DIR = "${config.xdg.dataHome}/password-store";
-      PASSWORD_STORE_GENERATED_LENGTH = "30";
-      PASSWORD_STORE_CHARACTER_SET = "a-zA-Z0-9~!@#$%^&*()-_=+[]{};:,.<>?";
-      PASSWORD_STORE_KEY = config.programs.gpg.settings.default-key;
-    };
-  };
-
-  programs.git = {
-    signing = {
-      key = config.programs.gpg.settings.default-key;
-      signByDefault = true;
-    };
-    extraConfig = {
-      credential = {
-        helper = "${pkgs.gitAndTools.pass-git-helper}/bin/pass-git-helper";
-        useHttpPath = true;
-      };
-    };
-  };
-
-  xdg.configFile."pass-git-helper/git-pass-mapping.ini" = {
-    source = ./git-pass-mapping.ini;
-  };
-
-  services.password-store-sync.enable = true;
-
-  # Ensure the password store things are in the systemd session
-  systemd.user.sessionVariables = config.programs.password-store.settings;
-}
diff --git a/users/fcuny/desktop/trust/pgp.nix b/users/fcuny/desktop/trust/pgp.nix
deleted file mode 100644
index 79ed7dd..0000000
--- a/users/fcuny/desktop/trust/pgp.nix
+++ /dev/null
@@ -1,17 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  services.gpg-agent = {
-    enable = true;
-    enableSshSupport = true;
-    pinentryFlavor = "gnome3";
-  };
-
-  programs.gpg = {
-    enable = true;
-    settings = {
-      default-key = "23348B57F01D4234B5CFBA0923208AC01EB6EEA1";
-    };
-  };
-}
-