[Services/GnuPG] Move all configuration in dedicated file

This commit is contained in:
Antoine Viallon 2023-04-05 09:41:53 +02:00
parent 3fa8298db2
commit 9977f0c62d
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
4 changed files with 35 additions and 32 deletions

View file

@ -104,34 +104,10 @@ in
# Some programs need SUID wrappers, can be configured further or are
# started in user sessions.
programs.mtr.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
systemd.user.services.gpg-agent = let
pinentrySwitcher = pkgs.callPackage ./packages/pinentry.nix {};
cfg = config.programs.gnupg;
in {
restartTriggers = [ pinentrySwitcher ];
restartIfChanged = true;
serviceConfig.ExecStart = [ "" ''
${cfg.package}/bin/gpg-agent --supervised \
--pinentry-program ${pinentrySwitcher}/bin/pinentry
'' ];
};
documentation.man.generateCaches = true;
environment.shellInit = concatStringsSep "\n" [
''export GPG_TTY="$(tty)"''
''gpg-connect-agent /bye''
''export SSH_AUTH_SOCK="/run/user/$UID/gnupg/S.gpg-agent.ssh"''
];
# zram is so usefull, we should always have it enabled.
zramSwap = {
enable = true;