stuff

2 files changed, 32 insertions, 1 deletions

diff --git a/configuration.nix b/configuration.nix
index a0a3032..c414100 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -111,6 +111,8 @@
   services.xserver.displayManager.startx.enable = true;
   services.xserver.libinput.enable = true;
 
+  services.pcscd.enable = true;
+
   sound.enable = true;
   security.rtkit.enable = true;
   services.pipewire = {
diff --git a/home.nix b/home.nix
index fe9b67b..73b1da9 100644
--- a/home.nix
+++ b/home.nix
@@ -125,6 +125,9 @@
       # source some workspace specific stuff
       [[ -f ~/env.sh ]] && . ~/env.sh
       export COLORTERM=truecolor
+      export GPG_TTY="$(tty)"
+      export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
+      gpgconf --launch gpg-agent
     '';
     shellAliases = {
       e             = "kakup ";
@@ -135,7 +138,7 @@
       ls            = "ls --color=auto";
       s             = "sudo nixos-rebuild switch --flake ${config.home.homeDirectory}/flake#";
       b             = "/run/current-system/bin/switch-to-configuration boot";
-      h             = "home-manager switch --flake ${config.home.homeDirectory}/flake#mvinkio --impure";
+      h             = "home-manager switch --flake ${config.home.homeDirectory}/flake --impure";
       fa            = "azdo-switch-project";
       v             = "nvim";
       V             = "nvim -S .vimsession.vim";
@@ -168,11 +171,37 @@
     ];
   };
 
+    # https://github.com/drduh/config/blob/master/gpg.conf
+    # https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html
+    # https://www.gnupg.org/documentation/manuals/gnupg/GPG-Esoteric-Options.html
   programs.gpg = {
     enable = true;
+    settings = {
+        personal-cipher-preferences = "AES256 AES192 AES";
+        personal-digest-preferences = "SHA512 SHA384 SHA256";
+        personal-compress-preferences = "ZLIB BZIP2 ZIP Uncompressed";
+        default-preference-list = "SHA512 SHA384 SHA256 AES256 AES192 AES ZLIB BZIP2 ZIP Uncompressed";
+        cert-digest-algo = "SHA512";
+        s2k-digest-algo = "SHA512";
+        s2k-cipher-algo = "AES256";
+        charset = "utf-8";
+        fixed-list-mode = true;
+        no-comments = true;
+        no-emit-version = true;
+        no-greeting = true;
+        keyid-format = "0xlong";
+        list-options = "show-uid-validity";
+        verify-options = "show-uid-validity";
+        "with-fingerprint" = true;
+        require-cross-certification = true;
+        no-symkey-cache = true;
+        use-agent = true;
+        throw-keyids = true;
+    };
   };
   services.gpg-agent = {
     enable = true;
+    enableSshSupport = true;
     defaultCacheTtl = 34550000;
     maxCacheTtl = 34550000;
   };