dotfiles/modules/nixos/services/keybase.nix

# Keybase is an encrypted communications tool with a synchronized encrypted
# filestore that can be mounted onto a machine's filesystem.

{
  config,
  pkgs,
  lib,
  ...
}:
{

  options.keybase.enable = lib.mkEnableOption "Keybase.";

  config = lib.mkIf config.keybase.enable {

    home-manager.users.${config.user} = lib.mkIf config.keybase.enable {

      services.keybase.enable = true;
      services.kbfs = {
        enable = true;
        mountPoint = "keybase";
      };

      # https://github.com/nix-community/home-manager/issues/4722
      systemd.user.services.kbfs.Service.PrivateTmp = lib.mkForce false;

      home.packages = [ (lib.mkIf config.gui.enable pkgs.keybase-gui) ];
      home.file =
        let
          ignorePatterns = ''
            keybase/
            kbfs/'';
        in
        {
          ".rgignore".text = ignorePatterns;
          ".fdignore".text = ignorePatterns;
        };
    };
  };
}