desktop/plasma: use gnome keyring

because it's used on every other desktop and signal client works only with it

Signed-off-by: unexplrd <unexplrd@linerds.us>

modules/home/desktop/plasma/default.nix

@@ -16,6 +16,11 @@ in {
   config = mkIf cfg.enable {
     stylix.targets.qt.enable = mkDefault false;
     stylix.targets.kde.enable = mkDefault true;
+    services.gnome-keyring = {
+      enable = true;
+      components = ["secrets"];
+    };
+
     home.packages = with pkgs; [
       wl-clipboard-rs
     ];

modules/nixos/config/boot/default.nix

@@ -14,7 +14,6 @@
     kernelPackages = pkgs.linuxPackages_cachyos;
     initrd = {
       systemd.enable = true;
-      systemd.tpm2.enable = false;
     };
   };
 }

modules/nixos/config/default.nix

@@ -1,6 +1,6 @@
 {
   config,
-  inputs,
+  # inputs,
   lib,
   pkgs,
   ...
@@ -31,9 +31,10 @@ in {
     };
   };
   config = lib.mkMerge [
-    (mkIf cfg.tpmDiskUnlock {
-      boot.initrd.systemd.tpm2.enable = mkDefault true;
-    })
+    {
+      boot.initrd.systemd.tpm2.enable = mkDefault cfg.tpmDiskUnlock;
+      boot.loader.systemd-boot.enable = mkDefault (!cfg.secureBoot);
+    }
     (mkIf cfg.useIwd {
       networking = {
         networkmanager.wifi.backend = "iwd";

modules/nixos/desktop/plasma.nix

@@ -1,5 +1,6 @@
 {
   config,
+  pkgs,
   lib,
   ...
 }:
@@ -17,7 +18,9 @@ in {
   };
   config = mkIf cfg.enable {
     stylix.targets.qt.enable = mkDefault false;
+    environment.systemPackages = with pkgs; [gcr_4];
     services = {
+      gnome.gnome-keyring.enable = true;
       desktopManager.plasma6.enable = true;
       displayManager.sddm = {
         enable = true; # cfg.sddmEnable;
@@ -25,5 +28,12 @@ in {
       };
     };
     fonts.fontDir.enable = true;
+
+    xdg.portal = {
+      enable = true;
+      config.common = {
+        "org.freedesktop.impl.portal.Secret" = ["gnome-keyring"];
+      };
+    };
   };
 }