From 877e3b61220f961016c91d3aa1e667ac36beac1c Mon Sep 17 00:00:00 2001
From: rope <fredrik@nordhammer.it>
Date: Thu, 2 Jul 2026 10:55:21 +0100
Subject: [PATCH] desktop: gnome-keyring + PAM unlock via ly

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 settings/desktop.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/settings/desktop.nix b/settings/desktop.nix
index 8806f14..546cb7a 100644
--- a/settings/desktop.nix
+++ b/settings/desktop.nix
@@ -16,6 +16,11 @@
     # Flatpak for ad-hoc app installs via Bazaar
     services.flatpak.enable = true;
 
+    # Secret Service for Chromium/Electron credential encryption;
+    # PAM unlocks the keyring with the login password at the ly greeter.
+    services.gnome.gnome-keyring.enable = true;
+    security.pam.services.ly.enableGnomeKeyring = true;
+
     environment.systemPackages = with pkgs; [
       nemo                 # file manager
       adwaita-icon-theme