nichts/modules/programs/gui/bitwarden.mod.nix

{
  config,
  lib,
  pkgs,
  ...
}:
let
  inherit (config.modules.system) isGraphical;
  inherit (lib.modules) mkIf;

  bitwarden-desktop-wrapped = pkgs.symlinkJoin {
    name = "bitwarden-desktop-wrapped";
    paths = [ pkgs.bitwarden-desktop ];
    nativeBuildInputs = [ pkgs.makeWrapper ];
    postBuild = ''
      wrapProgram $out/bin/bitwarden --set \
      BITWARDEN_SSH_AUTH_SOCK /run/user/1000/ssh-agent.sock
    '';
  };
in
{
  config = mkIf isGraphical {
    environment = {
      systemPackages = lib.attrValues {
        inherit (pkgs)
          bitwarden-cli
          ;
        inherit bitwarden-desktop-wrapped;
      };
      # Set the ssh socket globally. This alows all applications and shells to use
      # the ssh-agent.
      variables."SSH_AUTH_SOCK" = "/run/user/1000/ssh-agent.sock";
    };
  };
}