security: add pam configuration

hosts/temperance/configuration.nix

@@ -19,15 +19,14 @@
     system76-scheduler = {
       enable = true;
     };
-    gnome.gnome-keyring.enable = true;
   };
-  security.pam.services.login.enableGnomeKeyring = true;
+
-  environment.systemPackages = [pkgs.seahorse];
   meta = {
     mainUser.gitSigningKey = "";
   };
   modules = {
     system = {
+      isGraphical = true;
       impermanence.enable = true;
       boot = {
         systemd-boot.enable = true;

modules/system/os/security/security.mod.nix

@@ -7,5 +7,24 @@
       killUnconfinedConfinables = true;
       packages = [pkgs.apparmor-profiles];
     };
+
+    pam.services = {
+      login.kwallet = {
+        enable = true;
+        # package = pkgs.kdePackages.kwallet-pam;
+      };
+      niri = {
+        allowNullPassword = true;
+        kwallet = {
+          enable = true;
+          package = pkgs.kdePackages.kwallet-pam;
+        };
+      };
+    };
   };
+  environment.systemPackages = with pkgs.kdePackages; [
+    kwallet # provides helper service
+    kwallet-pam # provides helper service
+    kwalletmanager # provides KCMs and stuff
+  ];
 }