home/gpg.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

{
  config,
  lib,
  pkgs,
  inputs,
  ...
}: {
  # install keys into gpg keyring
  programs.gpg = {
    enable = true;
    homedir = "${config.xdg.dataHome}/gnupg";

    publicKeys =
      map (path: {
        source = path;
        trust = 5;
      })
      inputs.self.lib.gpgKeys;
  };

  # global gpg agent
  services.gpg-agent = {
    enable = true;
    enableExtraSocket = true;
    enableSshSupport = true;
    pinentry.package = pkgs.pinentry-curses;
  };
}