38 lines
941 B
Nix
38 lines
941 B
Nix
{...}: {
|
|
config.flake.modules.homeManager.encryption = {
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
options.azos.encryption.enable = lib.mkOption {
|
|
default = true;
|
|
type = lib.types.bool;
|
|
};
|
|
config = lib.mkIf config.azos.encryption.enable {
|
|
programs.password-store = {
|
|
enable = true;
|
|
settings = {
|
|
PASSWORD_STORE_KEY = "076AA297579A0064";
|
|
};
|
|
};
|
|
home.packages = with pkgs; [
|
|
yubikey-personalization
|
|
pinentry-gtk2
|
|
];
|
|
programs.gpg = {
|
|
enable = true;
|
|
};
|
|
services.gpg-agent = {
|
|
enable = true;
|
|
enableSshSupport = true;
|
|
grabKeyboardAndMouse = false;
|
|
pinentry.package = pkgs.pinentry-gtk2;
|
|
};
|
|
home.file.".ssh/config".source = ./ssh-config;
|
|
home.file.".ssh/gpg-as-ssh.pub".source = ./gpg-as-ssh.pub;
|
|
home.file.".gnupg/sshcontrol".source = ./sshcontrol;
|
|
};
|
|
};
|
|
}
|