mirror of
https://github.com/aviallon/nixos-lib.git
synced 2026-04-05 17:27:50 +00:00
[Services/GnuPG] Move all configuration in dedicated file
This commit is contained in:
parent
3fa8298db2
commit
9977f0c62d
4 changed files with 35 additions and 32 deletions
24
general.nix
24
general.nix
|
|
@ -104,34 +104,10 @@ in
|
|||
# Some programs need SUID wrappers, can be configured further or are
|
||||
# started in user sessions.
|
||||
programs.mtr.enable = true;
|
||||
programs.gnupg.agent = {
|
||||
enable = true;
|
||||
enableSSHSupport = true;
|
||||
};
|
||||
|
||||
systemd.user.services.gpg-agent = let
|
||||
pinentrySwitcher = pkgs.callPackage ./packages/pinentry.nix {};
|
||||
cfg = config.programs.gnupg;
|
||||
in {
|
||||
restartTriggers = [ pinentrySwitcher ];
|
||||
restartIfChanged = true;
|
||||
|
||||
serviceConfig.ExecStart = [ "" ''
|
||||
${cfg.package}/bin/gpg-agent --supervised \
|
||||
--pinentry-program ${pinentrySwitcher}/bin/pinentry
|
||||
'' ];
|
||||
};
|
||||
|
||||
documentation.man.generateCaches = true;
|
||||
|
||||
|
||||
environment.shellInit = concatStringsSep "\n" [
|
||||
''export GPG_TTY="$(tty)"''
|
||||
''gpg-connect-agent /bye''
|
||||
''export SSH_AUTH_SOCK="/run/user/$UID/gnupg/S.gpg-agent.ssh"''
|
||||
];
|
||||
|
||||
|
||||
# zram is so usefull, we should always have it enabled.
|
||||
zramSwap = {
|
||||
enable = true;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue