Commit a10d1fb68167

@@ -9,36 +9,4 @@
     pass-run
     passage
   ];
-
-  # Daily passage password store sync
-  systemd.user.services.passage-update = {
-    Unit = {
-      Description = "Update passage password store";
-    };
-    Service = {
-      Type = "oneshot";
-      ExecStart = toString (
-        pkgs.writeShellScript "passage-update" ''
-          export GIT_SSH_COMMAND="ssh -i ${config.home.homeDirectory}/.ssh/id_passage -o IdentitiesOnly=yes -o IdentityAgent=none -o ConnectTimeout=10 -o ServerAliveInterval=5 -o ServerAliveCountMax=3 -o BatchMode=yes"
-          ${pkgs.passage}/bin/passage git pull --rebase
-        ''
-      );
-      WorkingDirectory = config.home.sessionVariables.PASSAGE_DIR;
-      TimeoutStartSec = "60s";
-    };
-  };
-
-  systemd.user.timers.passage-update = {
-    Unit = {
-      Description = "Daily passage password store update";
-    };
-    Timer = {
-      OnCalendar = "daily";
-      Persistent = true;
-      RandomizedDelaySec = "1h";
-    };
-    Install = {
-      WantedBy = [ "timers.target" ];
-    };
-  };
 }

@@ -56,18 +56,7 @@ _: {
       };
       # Passage sync keys (non-SK, automated git pull only)
       # TODO: replace with the per-machine TPM approach.
-      kyushu-passage = {
-        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqhe3iS2058Ro8jN0b5Sr1tb+fEyqwgEmEC7vCM0za4 vincent@kyushu-passage";
-        access.vincent.carthage = {
-          gated = "passage-pull";
-        };
-      };
-      okinawa-passage = {
-        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/CgISZ5XVyg8eYH7b56EWo4UGplOzzZKdtMKtkZqxc vincent@okinawa-passage";
-        access.vincent.carthage = {
-          gated = "passage-pull";
-        };
-      };
+
       # okinawa user key: TPM-sealed ecdsa via ssh-tpm-agent (machine-bound, no touch)
       okinawa-tpm = {
         key = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBODwU2/sE+S51ShfL8t+QA9IMcVuQL+VLYuENUc5VDVD4AVoVj97BggowbAhtqDW6hdc0S3XSVrZs+aOSd9ukbg= vincent@okinawa-tpm";