{ config, ... }: { home.persistence."/nix/persist/home/${config.home.username}".directories = [ "keyring/.local/share/keyrings" ]; services.gnome-keyring = { enable = true; components = [ "pkcs11" "secrets" ]; }; }