···

       
1
       
1
       
-
       
{pkgs, ...}: {

     

       
2
       
2
       
-
       
  programs.gpg = {

     

       
1
       
1
       
+
       
{

     

       
2
       
2
       
+
       
  pkgs,

     

       
3
       
3
       
+
       
  lib,

     

       
4
       
4
       
+
       
  config,

     

       
5
       
5
       
+
       
  osConfig,

     

       
6
       
6
       
+
       
  ...

     

       
7
       
7
       
+
       
}:

     

       
8
       
8
       
+
       
let

     

       
9
       
9
       
+
       
  cfg = config.py.programs.gpg;

     

       
10
       
10
       
+
       
  osPro = osConfig.py.profiles;

     

       
11
       
11
       
+
       
in

     

       
12
       
12
       
+
       
{

     

       
13
       
13
       
+
       
  options.py.programs.gpg.enable = lib.mkEnableOption "gpg";

     

       
14
       
14
       
+
       
  config.programs.gpg = lib.mkIf (cfg.enable && osPro.development.enable) {

     

       
3
       
15
       
 
       
    enable = true;

     

       
4
       
16
       
 
       
    settings = {

     

       
5
       
17
       
 
       
      personal-cipher-preferences = "AES256 AES192 AES";

     
···

       
23
       
35
       
 
       
      no-symkey-cache = true;

     

       
24
       
36
       
 
       
      use-agent = true;

     

       
25
       
37
       
 
       
      throw-keyids = true;

     

       
26
       
26
       
-
       
      default-key = "0x7D5107866B1C6752";

     

       
27
       
27
       
-
       
      trusted-key = "0x7D5107866B1C6752";

     

       
38
       
38
       
+
       
      default-key = "0xFE1D8A7D620C611F";

     

       
39
       
39
       
+
       
      trusted-key = "0xFE1D8A7D620C611F";

     

       
28
       
40
       
 
       
      keyserver = "hkps://keys.openpgp.org";

     

       
29
       
41
       
 
       
    };

     

       
30
       
42
       
 
       
    scdaemonSettings = {