mirror of
https://git.sr.ht/~magic_rb/dotfiles
synced 2024-11-29 11:36:16 +01:00
58 lines
1.2 KiB
Nix
58 lines
1.2 KiB
Nix
# SPDX-FileCopyrightText: 2022 Richard Brežák <richard@brezak.sk>
|
|
#
|
|
# SPDX-License-Identifier: LGPL-3.0-or-later
|
|
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
with lib; let
|
|
cfg = config.magic_rb.programs.gpg;
|
|
in {
|
|
options.magic_rb.programs.gpg = {
|
|
enable =
|
|
mkEnableOption
|
|
''
|
|
Enable gpg and gpg-key.
|
|
'';
|
|
pinentryFlavor = mkOption {
|
|
description = "Which pinentry flavor should be used.";
|
|
type = types.enum [
|
|
"curses"
|
|
"emacs"
|
|
"mac"
|
|
"gtk2"
|
|
"qt"
|
|
"gnome"
|
|
];
|
|
default = "gtk2";
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
home.packages = with pkgs; [
|
|
gpg-key-rb
|
|
gnupg
|
|
pass
|
|
yubikey-manager
|
|
];
|
|
|
|
home.file.".gpg-agent.conf".text = ''
|
|
enable-ssh-support
|
|
pinentry-program ${pkgs.pinentry.${cfg.pinentryFlavor}}/bin/pinentry
|
|
'';
|
|
|
|
home.file.".profile".text = ''
|
|
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
|
|
'';
|
|
|
|
home.activation.gnupghome = config.lib.dag.entryAfter ["writeBoundary"] ''
|
|
if [[ ! -e ~/.gnupg/gpg-agent.conf ]] && [[ -d /mnt/key/gnupg ]]
|
|
then
|
|
ln -sf ~/.gpg-agent.conf /mnt/key/gnupg/gpg-agent.conf
|
|
fi
|
|
'';
|
|
};
|
|
}
|