ssh, gpg fixes

home/gpg.nix

@@ -0,0 +1,27 @@
+{ config, pkgs, ... }:
+
+{
+
+  programs.gpg.settings = {
+    no-emit-version = true;
+    no-comments = true;
+    keyserver = "hkps://keys.openpgp.org/";
+    keyserver-options = [
+      "no-honor-keyserver-url"
+      "include-revoked"
+    ];
+    personal-cipher-preferences = "AES256 AES192 AES CAST5";
+    personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
+    cert-digest-algo = "SHA512";
+    default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
+  };
+
+  xdg.configFile."scdaemon" = {
+    text = ''
+      disable-ccid
+      pcsc-shared
+    '';
+    target = "../.gnupg/scdaemon.conf";
+  };
+
+}

home/minimal.nix

@@ -44,6 +44,8 @@
     ./password-store.nix
     ./vifm
     ./nvim
+    ./gpg.nix
+    ./ssh.nix
   ];
 
   programs.nix-index = {
@@ -73,30 +75,4 @@
     settings.styles.theme = "default-light";
   };
 
-  programs.ssh.matchBlocks = {
-    geocom = {
-      hostname = "geocom.uni-frankfurt.de";
-      user = "till";
-      identityFile = "${config.home.homeDirectory}/.ssh/tstraube";
-    };
-  };
-
-  programs.gpg.settings = {
-
-    no-emit-version = true;
-    no-comments = true;
-
-    keyserver = "hkps://keys.openpgp.org/";
-    keyserver-options = [
-      "no-honor-keyserver-url"
-      "include-revoked"
-    ];
-
-    personal-cipher-preferences = "AES256 AES192 AES CAST5";
-    personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
-    cert-digest-algo = "SHA512";
-    default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
-
-  };
-
 }

home/ssh.nix

@@ -0,0 +1,24 @@
+{ config, ... }:
+
+{
+  programs.ssh = {
+
+    enable = true;
+
+    matchBlocks = {
+
+      gu = {
+        hostname = "login.server.uni-frankfurt.de";
+        user = "tstraube";
+        identityFile = "${config.home.homeDirectory}/.ssh/tstraube";
+      };
+
+      geocom = {
+        hostname = "geocom.uni-frankfurt.de";
+        user = "till";
+        identityFile = "${config.home.homeDirectory}/.ssh/tstraube";
+      };
+
+    };
+  };
+}

system/secrets.nix

@@ -6,6 +6,9 @@
     enable = true;
     pinentryPackage = pkgs.pinentry-gnome3;
     enableSSHSupport = true;
+    settings = {
+      # disable-scdaemon = "";
+    };
   };
 
 }