From e8077fde966e051fc449fffcfa061c7f7edc47b0 Mon Sep 17 00:00:00 2001 From: Caroline Larimore Date: Mon, 14 Apr 2025 19:01:38 -0700 Subject: migration: finalize --- modules/home/tools/gpg/default.nix | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 modules/home/tools/gpg/default.nix (limited to 'modules/home/tools/gpg/default.nix') diff --git a/modules/home/tools/gpg/default.nix b/modules/home/tools/gpg/default.nix new file mode 100644 index 0000000..297d9d0 --- /dev/null +++ b/modules/home/tools/gpg/default.nix @@ -0,0 +1,32 @@ +{ options, config, lib, pkgs, namespace, ... }: + +with lib; with lib.${namespace}; let + cfg = config.${namespace}.tools.gpg; + impermanence = config.${namespace}.impermanence; +in { + options.${namespace}.tools.gpg = with types; { + enable = mkEnableOption "gpg"; + }; + + config = mkIf cfg.enable { + home.persistence.${impermanence.secure.location} = { + directories = [ + ".gnupg" + ]; + }; + + programs.gpg.enable = true; + + services.gpg-agent = { + enable = true; + enableSshSupport = true; + pinentryPackage = (pkgs.writeShellScriptBin "pinentry-wrapper" '' + if [[ -v DISPLAY ]]; then + exec ${pkgs.pinentry-gnome3}/bin/pinentry-gnome3 "$@" + fi + + exec ${pkgs.pinentry-gnome3}/bin/pinentry-tty "$@" + ''); + }; + }; +} -- cgit v1.2.3