wry, many thing

graphical/password-manager.nix

@@ -1,19 +1,30 @@
 { pkgs, lib, ... }:
-{
-  user.xdg.config.files."rbw/config.json" = {
-    generator = lib.generators.toJSON { };
-    value = {
-      email = "boss@atagen.co";
-      pinentry = lib.getExe pkgs.pinentry-gtk2; # TODO this is fugly
-      base_url = "https://vault.lobotomise.me";
-    };
+let
+  rbwConfigDir = pkgs.runCommand "rbw-xdg" { } ''
+    mkdir -p $out/rbw
+    cp ${
+      (pkgs.formats.json { }).generate "rbw-config.json" {
+        email = "boss@atagen.co";
+        pinentry = lib.getExe pkgs.pinentry-qt;
+        base_url = "https://vault.lobotomise.me";
+      }
+    } $out/rbw/config.json
+  '';
+  rbwWrapped = pkgs.symlinkJoin {
+    name = "rbw";
+    paths = [ pkgs.rbw ];
+    nativeBuildInputs = [ pkgs.makeWrapper ];
+    postBuild = ''
+      for bin in $out/bin/rbw $out/bin/rbw-agent; do
+        [ -f "$bin" ] && wrapProgram "$bin" \
+          --set XDG_CONFIG_HOME "${rbwConfigDir}"
+      done
+    '';
   };
-
-  # nixpkgs.config.permittedInsecurePackages = [
-  #   "electron-36.9.5"
-  # ];
+in
+{
   apps = with pkgs; {
     passwordManager = bitwarden-desktop;
-    passwordCli = rbw;
+    passwordCli = rbwWrapped;
   };
 }