From d38c98d4e4e57bf554663273a5ce24de6d6541ad Mon Sep 17 00:00:00 2001
From: Alex Bates <alex@bates64.com>
Date: Thu, 15 Oct 2026 11:36:33 +0100
Subject: [PATCH] add goat and the starhaven.dev ATProto app password

---
 modules/home/atproto.nix           | 15 +++++++++++++++
 modules/home/profiles/personal.nix |  1 +
 secrets/atproto.yaml               | 16 ++++++++++++++++
 3 files changed, 32 insertions(+)
 create mode 100644 modules/home/atproto.nix
 create mode 100644 secrets/atproto.yaml

diff --git a/modules/home/atproto.nix b/modules/home/atproto.nix
new file mode 100644
index 0000000..8847c6b
--- /dev/null
+++ b/modules/home/atproto.nix
@@ -0,0 +1,15 @@
+# goat, the ATProto command-line tool, and the app password for the starhaven.dev account.
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
+{
+  imports = [ inputs.sops-nix.homeManagerModules.sops ];
+
+  sops.age.sshKeyPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519" ];
+  sops.secrets.starhaven-dev-app-password.sopsFile = ../../secrets/atproto.yaml;
+
+  home.packages = [ pkgs.atproto-goat ];
+}
diff --git a/modules/home/profiles/personal.nix b/modules/home/profiles/personal.nix
index c66dcd9..8009e11 100644
--- a/modules/home/profiles/personal.nix
+++ b/modules/home/profiles/personal.nix
@@ -1,5 +1,6 @@
 {
   imports = [
+    ../atproto.nix
     ../discord-mcp.nix
     ../gmail
     ../kagi-mcp.nix
diff --git a/secrets/atproto.yaml b/secrets/atproto.yaml
new file mode 100644
index 0000000..b212dca
--- /dev/null
+++ b/secrets/atproto.yaml
@@ -0,0 +1,16 @@
+starhaven-dev-app-password: ENC[AES256_GCM,data:x406/y+9GhUoAzX8vxtUA6mYsw==,iv:Qk1oK+KXFyKhHNQrjtbAh/vkrx6vlgBvukZJFBIJnSY=,tag:nHylxu5kD85ZUbLuSzEQ5g==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBadHMraytxMUs2MU15L0hu
+            RkZJcEtaRWxweVR3dWpRUzRtNmF4MmZsU1ZnCnlLQXc2Q0d3WlFwZU9LMW5uRTFD
+            UFViUEg0V2xKQ0l3VDZiYlEySmpFekEKLS0tIGxvdHZERFZMc2Y2WjFlZCtsd0N0
+            RmRFM0pMUGNVMUt6WEZ0VVFic05sNEEKOBh4FJCgcPVtc/OeIruDR4uG/56MGYjl
+            /1D6NbOj4qpvaRUtxBAo8xkfjoiiDqGxty3p5DMyuX7vdT5367DHsQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1h08rnd0jeddf55l6l3rf6dlwwh7mngcxy92tyz0hfysjqx4wvgrq6vmah2
+    lastmodified: "2026-10-15T10:36:52Z"
+    mac: ENC[AES256_GCM,data:5ys+t+naxi8kXAIfM7/JrC+VBsC8jPTUz0iD8TZIzhYn6IVfSCkPgGgOtBUx6muZ9X4/mrMbVRrWQU+kyttaca6b433ptesk8cCg08ahdryCE1vrZs3IC0wNE/AiW9EIElGnHNy49BJqNwH3ieFy0p5ZmNltm8PPxKRVB9B2Ofo=,iv:OyZC2GSspQcp0Ml/9RoaQWajVoAPntTde7ZTdOaWmao=,tag:1fC9VoANsuzbM0X2Xvp0pg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.13.3
-- 
2.51.2