risky business
This commit is contained in:
parent
120d26b0e4
commit
415e3c1caf
10 changed files with 62 additions and 85 deletions
35
home/gpg.nix
35
home/gpg.nix
|
|
@ -7,25 +7,20 @@
|
|||
enableSshSupport = true;
|
||||
};
|
||||
|
||||
programs.gpg.settings = {
|
||||
no-emit-version = true;
|
||||
no-comments = true;
|
||||
keyserver = "hkps://keys.openpgp.org/";
|
||||
keyserver-options = [
|
||||
"no-honor-keyserver-url"
|
||||
"include-revoked"
|
||||
];
|
||||
personal-cipher-preferences = "AES256 AES192 AES CAST5";
|
||||
personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
|
||||
cert-digest-algo = "SHA512";
|
||||
default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
|
||||
};
|
||||
|
||||
xdg.configFile."scdaemon" = {
|
||||
text = ''
|
||||
disable-ccid
|
||||
pcsc-shared
|
||||
'';
|
||||
target = "../.gnupg/scdaemon.conf";
|
||||
programs.gpg = {
|
||||
homedir = "${config.xdg.dataHome}/gnupg";
|
||||
settings = {
|
||||
no-emit-version = true;
|
||||
no-comments = true;
|
||||
keyserver = "hkps://keys.openpgp.org/";
|
||||
keyserver-options = [
|
||||
"no-honor-keyserver-url"
|
||||
"include-revoked"
|
||||
];
|
||||
personal-cipher-preferences = "AES256 AES192 AES CAST5";
|
||||
personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
|
||||
cert-digest-algo = "SHA512";
|
||||
default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue