33 lines
844 B
Nix
33 lines
844 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
|
|
home.packages = with pkgs; [
|
|
pinentry-all
|
|
];
|
|
|
|
services.gpg-agent = {
|
|
enable = true;
|
|
# pinentry.package = pkgs.pinentry-gnome3;
|
|
pinentry.program = "pinentry-gnome3";
|
|
enableSshSupport = true;
|
|
};
|
|
|
|
programs.gpg = {
|
|
enable = true;
|
|
# homedir = "${config.xdg.dataHome}/gnupg";
|
|
settings = {
|
|
no-emit-version = true;
|
|
no-comments = true;
|
|
keyserver = "hkps://keys.openpgp.org/";
|
|
keyserver-options = [
|
|
"no-honor-keyserver-url"
|
|
"include-revoked"
|
|
];
|
|
personal-cipher-preferences = "AES256 AES192 AES CAST5";
|
|
personal-digest-preferences = "SHA512 SHA384 SHA256 SHA224";
|
|
cert-digest-algo = "SHA512";
|
|
default-preference-list = "SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed";
|
|
};
|
|
};
|
|
}
|