From c1ec4851d52e7ea0e599a2e6500d82fc3e9efa13 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 18 Feb 2026 11:00:36 -0800
Subject: [PATCH] Use NixOS 1Password modules for proper CLI-GUI integration

Raw _1password-cli and _1password-gui packages don't set up the
onepassword-cli group, setgid bit, or polkit policy needed for
CLI-to-desktop-app communication. The NixOS modules handle this.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 nixos/ringtail/configuration.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/nixos/ringtail/configuration.nix b/nixos/ringtail/configuration.nix
index d28f5d2..235dae4 100644
--- a/nixos/ringtail/configuration.nix
+++ b/nixos/ringtail/configuration.nix
@@ -72,6 +72,13 @@
   # Fish shell
   programs.fish.enable = true;
 
+  # 1Password (modules handle CLI group/setgid and polkit for GUI integration)
+  programs._1password.enable = true;
+  programs._1password-gui = {
+    enable = true;
+    polkitPolicyOwners = [ "eblume" ];
+  };
+
   # Steam
   programs.steam = {
     enable = true;
@@ -111,8 +118,6 @@
     htop
     curl
     wget
-    _1password-cli
-    _1password-gui
     chezmoi
     neovim
     eza