{ config, lib, pkgs, ... }:
with lib; {
  config.programs.password-store = mkIf (!config.home.isolation.active) {
    enable = true;
    package = pkgs.pass.withExtensions (exts: (with exts; [
      pass-audit
      pass-genphrase
      pass-otp
      pass-tomb
      pass-update
    ]) ++ [
      pkgs.local.pass-bcr
    ]);

    settings = {
      PASSWORD_STORE_DIR = "${config.home.homeDirectory}/pass";
      PASSWORD_STORE_TOMB_KEY = "${config.home.homeDirectory}/tomb/pass.key.gpg";
      PASSWORD_STORE_TOMB_FILE = "${config.home.homeDirectory}/tomb/pass.tomb";
    };
  };
}