{ config, pkgs, ... }:

{
  services.gnome-keyring.enable = false;

  programs.password-store = {
    enable = true;
    settings = {
      PASSWORD_STORE_DIR = "${config.xdg.dataHome}/crypto/password-store";
    };
  };

  programs.firefox.nativeMessagingHosts = [
    pkgs.passff-host
  ];

  services.pass-secret-service = {
    enable = true;
  };

  home.packages = with pkgs; [
    pinentry-all
  ];

  xdg.configFile."scdaemon" = {
    text = ''
      disable-ccid
      pcsc-shared
    '';
    target = "../.gnupg/scdaemon.conf";
  };
}