secrets manager
git clone https://git.lucas.co/cce-secrets.git
cce-1password.service (870B)
1 # The 1Password app, headless (KEYRING-SYNC.md, option A): what
2 # cce-keyring-sync's `op` authorizes against. Its own "start at login" writes
3 # ~/.config/autostart/com.onepassword.OnePassword.desktop, but nothing in a cce
4 # session starts xdg-desktop-autostart.target, so that file never fires — on
5 # 2026-10-02 the app was simply absent after two logins and the sync daemon
6 # retried "1Password app not running" until it was opened by hand.
7 # A second launch hands off to a running instance and exits 0, so starting
8 # this beside an app opened by hand is harmless.
9 [Unit]
10 Description=1Password (headless, for cce-keyring-sync)
11 After=graphical-session.target
12 PartOf=graphical-session.target
13 Before=cce-keyring-sync.service
14
15 [Service]
16 Type=simple
17 ExecStart=/opt/1Password/1password --silent
18 Restart=on-failure
19 RestartSec=10
20
21 [Install]
22 WantedBy=graphical-session.target