{ config, pkgs, ... }:

{

  home.packages = with pkgs; [
    pinentry-all
  ];

  services.gpg-agent = {
    enable = true;
    # pinentry.package = pkgs.pinentry-gnome3;
    pinentry.program = "pinentry-gnome3";
    enableSshSupport = true;
  };

  programs.gpg = {
    enable = true;
    # homedir = "${config.xdg.dataHome}/gnupg";
    settings = {
      no-emit-version = true;
      no-comments = true;
      keyserver = "hkps://keys.openpgp.org/";
      keyserver-options = [
        "no-honor-keyserver-url"
        "include-revoked"
      ];
      personal-cipher-preferences = "AES256 AES192 AES CAST5";
      personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
      cert-digest-algo = "SHA512";
      default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
    };
  };
}