Encryption

2025-04-18 13:52:08 +03:00
parent 49e0d86e06
commit bc2da7b287
7 changed files with 35 additions and 3 deletions
@@ -0,0 +1,29 @@
+{ lib, config, pkgs, ... }:
+let
+  isEnabled =
+    config.azos.encryption.enable;
+in {
+    options.azos.encryption.enable = lib.mkOption {
+      default = true;
+      example = true;
+      type = lib.types.bool;
+    };
+
+    config = lib.mkIf isEnabled {
+      programs.password-store = {
+        enable = true;
+        settings = {
+          PASSWORD_STORE_KEY = "076AA297579A0064";
+        };
+      };
+
+      home.packages = with pkgs; [
+        yubikey-personalization
+        gnupg
+      ];
+
+      home.file.".ssh/config".source = ./ssh-config;
+      home.file.".ssh/gpg-as-ssh.pub".source = ./gpg-as-ssh.pub;
+      home.file.".gnupg/sshcontrol".source = ./sshcontrol;
+    };
+}