machine_setup/nix/configuration/roles/gnome_keyring/default.nix

{
  config,
  lib,
  pkgs,
  ...
}:

{
  imports = [ ];

  options.me = {
    gnome_keyring.enable = lib.mkOption {
      type = lib.types.bool;
      default = false;
      example = true;
      description = "Whether we want to install gnome_keyring.";
    };
  };

  config = lib.mkIf (config.me.gnome_keyring.enable && config.me.graphical) {
    services.gnome.gnome-keyring.enable = true;

    environment.systemPackages = with pkgs; [
      seahorse # UI for managing secrets.
      libsecret
    ];

    environment.persistence."/persist" = lib.mkIf (config.me.mountPersistence) {
      hideMounts = true;
      users.talexander = {
        directories = [
          {
            directory = ".local/share/keyrings";
            user = "talexander";
            group = "talexander";
            mode = "0755";
          }
        ];
      };
    };
  };
}