secrets manager
git clone https://git.lucas.co/cce-secrets.git
cce-keyring-sync.service (748B)
1 # The resident cce-keyring-sync daemon (see KEYRING-SYNC.md, "Phase 0
2 # results"): keeps gnome-keyring and 1Password in step, ticking every five
3 # minutes. Resident because the 1Password CLI's authorization is keyed to
4 # the calling process's parent and lapses after ~10 idle minutes — a oneshot
5 # timer would raise an Authorize dialog on every tick; this process raises
6 # one per login. SIGUSR1 syncs now (cce-secrets sends it from its Sync
7 # button and after a save).
8 [Unit]
9 Description=Sync gnome-keyring with 1Password (resident)
10 After=graphical-session.target
11 PartOf=graphical-session.target
12
13 [Service]
14 Type=simple
15 ExecStart=%h/.local/bin/cce-keyring-sync daemon
16 Restart=on-failure
17 RestartSec=30
18
19 [Install]
20 WantedBy=graphical-session.target