Refractor to dendritic approach.

features/encryption/default.nix

@@ -0,0 +1,37 @@
+{...}: {
+  config.flake.modules.homeManager.encryption = {
+    lib,
+    config,
+    pkgs,
+    ...
+  }: {
+    options.azos.encryption.enable = lib.mkOption {
+      default = true;
+      type = lib.types.bool;
+    };
+    config = lib.mkIf config.azos.encryption.enable {
+      programs.password-store = {
+        enable = true;
+        settings = {
+          PASSWORD_STORE_KEY = "076AA297579A0064";
+        };
+      };
+      home.packages = with pkgs; [
+        yubikey-personalization
+        pinentry-gtk2
+      ];
+      programs.gpg = {
+        enable = true;
+      };
+      services.gpg-agent = {
+        enable = true;
+        enableSshSupport = true;
+        grabKeyboardAndMouse = false;
+        pinentry.package = pkgs.pinentry-gtk2;
+      };
+      home.file.".ssh/config".source = ./ssh-config;
+      home.file.".ssh/gpg-as-ssh.pub".source = ./gpg-as-ssh.pub;
+      home.file.".gnupg/sshcontrol".source = ./sshcontrol;
+    };
+  };
+}

features/encryption/gpg-as-ssh.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBFZRqiTsOCAJPMqUyMeLd2MbyjdGoyqDVq5/Inhb6EOaM1NUGG4b6FPmYgFLyJIm5LC9BOo6M7npiaiOs/zMqp+hoGLNQUNwm5/G0uy1bjkEfKdUTdGnJ2+M9rkxrR1c+KXrjkiqECqTbnPE4mJbGyVxBW2MwMeP5w8c0DB5KO528PetvHMPPQuEdXyZzDI4kKtVpMlJoPIrIGlNFX0G/wrgXcM4zU1snOTuYGqZnWW++4kBsgIlRKpf/bLJyUMTp30eLVr0fQ6OMBtj1tzUUBaaowU6VGYQQDU/rIh/NpkA2cEVPXZegM4OohkAqrJBFPIAg90WD9Z/SyQlz0Jn8PpAloP0Cuq2vVRr+QLEwxqGiFq91YQ2VtwksMHwJGVrXRCNegpxTZQijWMEd+o0FD2cEd7Ftw6v2L6g12GJ3QGX/q0d/u0GongLLa9fPXl4VoAu7AL+cUcbX/SS7RCG8kYAR3DwOazVbK0NWEdwvWdoSU4lZ3j2at1xqMGjHjyLiTeUqZBjm+Sl5MJWIYNg+8hnONljvggg4SzDFDAkgVLZtOCaZibsMA1ucGR7VRCM09uoaEI4/ZS5pCBtYcp8X67Bv67Og8s2NFf5sUfYBPPKpdBSs+dEPycNVff6JlmzfNiyzLawacGKIDWYSgkOl43N/5ehtpsL3HMZ+5SVNIw== (none)

features/encryption/ssh-config

@@ -0,0 +1 @@
+IdentityAgent ${XDG_RUNTIME_DIR}/gnupg/S.gpg-agent.ssh

features/encryption/sshcontrol

@@ -0,0 +1 @@
+61D809B46CEE2A0AF799C4C2FADB0F61A19EEABD