27 lines
551 B
Nix
27 lines
551 B
Nix
|
{ pkgs, ... }:
|
||
|
|
{
|
||
|
|
programs.gpg = {
|
||
|
|
enable = true;
|
||
|
|
mutableKeys = false;
|
||
|
|
mutableTrust = false;
|
||
|
|
publicKeys = [
|
||
|
|
{
|
||
|
|
source = ./public-gpg-yubikey.asc;
|
||
|
|
trust = "ultimate";
|
||
|
|
}
|
||
|
|
];
|
||
|
|
};
|
||
|
|
services.gpg-agent = {
|
||
|
|
enable = true;
|
||
|
|
enableSshSupport = true;
|
||
|
|
enableZshIntegration = true;
|
||
|
|
pinentryPackage = pkgs.pinentry-qt;
|
||
|
|
maxCacheTtl = 14400;
|
||
|
|
maxCacheTtlSsh = 14400;
|
||
|
|
sshKeys = [ "530D3EC95C32AB9EC33714AAF865738D6E77680A" ];
|
||
|
|
extraConfig = ''
|
||
|
|
allow-loopback-pinentry
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
}
|