dots/users/price/conf/gpg/default.nix
Price Hiller 2f75fe897d
Some checks failed
Check Formatting of Files / Check-Formatting (push) Failing after 1m7s
refactor(nix/hm/price): do not modify gpg scdaemon settings
2024-06-12 09:16:03 -05:00

28 lines
605 B
Nix

{ pkgs, config, ... }:
{
programs.gpg = {
homedir = "${config.xdg.dataHome}/gnupg";
enable = true;
mutableKeys = false;
mutableTrust = false;
publicKeys = [
{
source = ./public-gpg-yubikey.asc;
trust = "ultimate";
}
];
};
services.gpg-agent = {
enable = true;
enableSshSupport = true;
enableZshIntegration = true;
pinentryPackage = pkgs.pinentry-qt;
maxCacheTtl = 14400;
maxCacheTtlSsh = 14400;
sshKeys = [ "530D3EC95C32AB9EC33714AAF865738D6E77680A" ];
extraConfig = ''
allow-loopback-pinentry
'';
};
}