docs: rewrite README password management section

1 files changed, 7 insertions, 34 deletions

diff --git a/.local/share/dotfiles/README.md b/.local/share/dotfiles/README.md
index 3cd1772..81ba470 100644
--- a/.local/share/dotfiles/README.md
+++ b/.local/share/dotfiles/README.md
@@ -15,47 +15,23 @@ Add any file to the repository: `git add ~/.bashrc`.
 
 ## Setup
 
-There are two per-user choices not included in the repo. First, `DOTFILES_DIR` (because you can choose where the bare
-repo lives):
+Some environment variables have to be for other programs to function properly. We set them in `~/.config/environment.d`
+to make them available globally (unlike most environment variables which are set in bash's environment).
 
 ```bash
 echo "DOTFILES_DIR=$DOTFILES_DIR" >>"$HOME/.config/environment.d/50-dotfiles.conf"
-```
-
-Second, the `pass` store. It defaults to `~/.password-store`, but you can keep it anywhere; point `PASSWORD_STORE_DIR`
-at it the same way:
-
-```bash
 echo "PASSWORD_STORE_DIR=$HOME/Secret/pass" >>"$HOME/.config/environment.d/50-pass.conf"
 ```
 
-The store is its own git repository, manage it with `pass git ...`, independent of the dotfiles repo.
-
-These variables must be available for other programs to function. See `man 5 environment.d`. Now reboot.
-
-## Password management
-
-For browser integration, install the [browserpass][7] extension from the browser's add-on store. Everything else is
-handled by `dotfiles sync`: it installs Firefox and the `browserpass` package, and symlinks the native messaging host
-from `/usr/lib/browserpass` into `~/.mozilla/native-messaging-hosts/`.
-
-browserpass inherits `PASSWORD_STORE_DIR` automatically because the browser is launched with the `environment.d`
-environment — which is exactly why that variable lives there and not in the shell rc.
-
-For Secret Service integration, [pass-secret-service][8] exposes the `org.freedesktop.secrets` D-Bus API backed by the
-same `pass` store, so any application that would normally reach for GNOME Keyring or KWallet (NetworkManager secrets,
-IDE credential stores, …) reads and writes through `pass` instead. Like browserpass, it inherits `PASSWORD_STORE_DIR`
-from the `environment.d` environment.
+Log back in for them to be applied.
 
 ## Overview
 
 - **Terminal emulator**: [foot][1]
 - **Terminal multiplexer**: [tmux][2]
 - **Shell**: [bash][3]
-- **File browser**: [ranger][4]
-- **Text editor**: [nvim][5]
-- **Password manager**: [pass][6]
-- **Secret Service provider**: [pass-secret-service][8]
+- **Text editor**: [nvim][4]
+- **Password manager**: [pass][5]
 
 ## Links
 
@@ -63,8 +39,5 @@ from the `environment.d` environment.
 [1]: https://codeberg.org/dnkl/foot#index
 [2]: https://github.com/tmux/tmux/wiki
 [3]: https://www.gnu.org/software/bash/
-[4]: https://github.com/ranger/ranger
-[5]: https://neovim.io/
-[6]: https://www.passwordstore.org/
-[7]: https://github.com/browserpass/browserpass-extension
-[8]: https://github.com/grimsteel/pass-secret-service
+[4]: https://neovim.io/
+[5]: https://www.passwordstore.org/