Inject the password-store flag to vscode.

nix/configuration/roles/vscode/default.nix

@@ -5,6 +5,62 @@
   ...
 }:
 
+let
+  extensions_to_install =
+    final:
+    with final.vscode-extensions;
+    let
+      common = [
+        bbenoist.nix
+        ms-azuretools.vscode-docker
+        ms-vscode-remote.remote-ssh
+        esbenp.prettier-vscode
+      ];
+      work_specific = [
+        # ms-python.vscode-pylance
+      ]
+      ++ (pkgs.vscode-utils.extensionsFromVscodeMarketplace [
+        {
+          name = "remote-server";
+          publisher = "ms-vscode";
+          version = "1.5.3";
+          sha256 = "MSayIBwvSgIHg6gTrtUotHznvo5kTiveN8iSrehllW0=";
+        }
+        {
+          name = "vscode-python-envs";
+          publisher = "ms-python";
+          version = "1.12.0";
+          sha256 = "8dCnGBuxv+8QwP0FrUZIKFxllVOR2z+wIhyyJgxsRns=";
+        }
+        {
+          name = "vscode-pylance";
+          publisher = "ms-python";
+          version = "2025.10.1";
+          sha256 = "7NLq5huykRAhhEIHjtXLKDBFwQ5yiJKFLG64Tjh0yaM=";
+        }
+        {
+          name = "debugpy";
+          publisher = "ms-python";
+          version = "2025.16.0";
+          sha256 = "QPIDUzzwIfzyicsCwqU2u6hVSjCJMInHhHMBqvL8tYs=";
+        }
+        {
+          name = "python";
+          publisher = "ms-python";
+          version = "2025.18.0";
+          sha256 = "6auzfS1DmOuaqV2rDHSCC9BlrcON4xUrdJZ0N0wYCs4=";
+        }
+      ]);
+      personal_specific = [
+        ms-python.python
+        ms-python.debugpy
+      ];
+    in
+    if config.me.vscode.enable_work_profile then
+      common ++ work_specific
+    else
+      common ++ personal_specific;
+in
 {
   imports = [ ];
 
@@ -34,66 +90,7 @@
     ];
 
     environment.systemPackages = with pkgs; [
-      (vscode-with-extensions.override {
-        vscodeExtensions =
-          with vscode-extensions;
-          (
-            [
-              bbenoist.nix
-              ms-azuretools.vscode-docker
-              ms-vscode-remote.remote-ssh
-              esbenp.prettier-vscode
-            ]
-            ++ (
-              if config.me.vscode.enable_work_profile then
-                [
-                  # ms-python.vscode-pylance
-                ]
-              else
-                [
-                  ms-python.python
-                  ms-python.debugpy
-                ]
-            )
-            ++ (pkgs.vscode-utils.extensionsFromVscodeMarketplace (
-              if config.me.vscode.enable_work_profile then
-                [
-                  {
-                    name = "remote-server";
-                    publisher = "ms-vscode";
-                    version = "1.5.3";
-                    sha256 = "MSayIBwvSgIHg6gTrtUotHznvo5kTiveN8iSrehllW0=";
-                  }
-                  {
-                    name = "vscode-python-envs";
-                    publisher = "ms-python";
-                    version = "1.12.0";
-                    sha256 = "8dCnGBuxv+8QwP0FrUZIKFxllVOR2z+wIhyyJgxsRns=";
-                  }
-                  {
-                    name = "vscode-pylance";
-                    publisher = "ms-python";
-                    version = "2025.10.1";
-                    sha256 = "7NLq5huykRAhhEIHjtXLKDBFwQ5yiJKFLG64Tjh0yaM=";
-                  }
-                  {
-                    name = "debugpy";
-                    publisher = "ms-python";
-                    version = "2025.16.0";
-                    sha256 = "QPIDUzzwIfzyicsCwqU2u6hVSjCJMInHhHMBqvL8tYs=";
-                  }
-                  {
-                    name = "python";
-                    publisher = "ms-python";
-                    version = "2025.18.0";
-                    sha256 = "6auzfS1DmOuaqV2rDHSCC9BlrcON4xUrdJZ0N0wYCs4=";
-                  }
-                ]
-              else
-                [ ]
-            ))
-          );
-      })
+      vscode-with-extensions
     ];
 
     me.install.user.talexander.file = {
@@ -156,5 +153,25 @@
         ];
       };
     };
+
+    nixpkgs.overlays = [
+      (final: prev: {
+        vscode-with-extensions = (
+          prev.vscode-with-extensions.override {
+            vscodeExtensions = (extensions_to_install final);
+          }
+        );
+      })
+      (final: prev: {
+        vscode-with-extensions = pkgs.symlinkJoin {
+          name = prev.vscode-with-extensions.name;
+          paths = [ prev.vscode-with-extensions ];
+          buildInputs = [ pkgs.makeWrapper ];
+          postBuild = ''
+            wrapProgram $out/bin/code --add-flags --password-store=gnome-libsecret
+          '';
+        };
+      })
+    ];
   };
 }

nix/steam_deck/configuration/flake.lock

@@ -25,11 +25,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1757698511,
-        "narHash": "sha256-UqHHGydF/q3jfYXCpvYLA0TWtvByOp1NwOKCUjhYmPs=",
+        "lastModified": 1764998300,
+        "narHash": "sha256-fZatn/KLfHLDXnF0wy7JxXqGaZmGDTVufT4o/AOlj44=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "a3fcc92180c7462082cd849498369591dfb20855",
+        "rev": "27a6182347ccae90a88231ae0dc5dfa7d15815bb",
         "type": "github"
       },
       "original": {
@@ -61,11 +61,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1752054764,
-        "narHash": "sha256-Ob/HuUhANoDs+nvYqyTKrkcPXf4ZgXoqMTQoCK0RFgQ=",
+        "lastModified": 1762090880,
+        "narHash": "sha256-fbRQzIGPkjZa83MowjbD2ALaJf9y6KMDdJBQMKFeY/8=",
         "owner": "nix-community",
         "repo": "nixGL",
-        "rev": "a8e1ce7d49a149ed70df676785b07f63288f53c5",
+        "rev": "b6105297e6f0cd041670c3e8628394d4ee247ed5",
         "type": "github"
       },
       "original": {
@@ -76,16 +76,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1757746433,
-        "narHash": "sha256-fEvTiU4s9lWgW7mYEU/1QUPirgkn+odUBTaindgiziY=",
-        "owner": "nixos",
+        "lastModified": 1763966396,
+        "narHash": "sha256-6eeL1YPcY1MV3DDStIDIdy/zZCDKgHdkCmsrLJFiZf0=",
+        "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6d7ec06d6868ac6d94c371458fc2391ded9ff13d",
+        "rev": "5ae3b07d8d6527c42f17c876e404993199144b6a",
         "type": "github"
       },
       "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }

nix/steam_deck/configuration/flake.nix

@@ -30,6 +30,7 @@
       pkgs = import nixpkgs {
         inherit system;
         overlays = [ nixgl.overlay ];
+        # Cannot set arch/tune with stand-alone home manager: https://github.com/nix-community/home-manager/issues/2954#issuecomment-1765433433
       };
     in
     # pkgs = nixpkgs.legacyPackages.${system};