initial support for gpg

2024-11-12 15:15:52 +01:00 · 2024-11-12 15:15:52 +01:00 · cae62a5442
commit cae62a5442
parent 4ce118f98e
6 changed files with 37 additions and 1 deletions
--- a/config/graphical.nix
+++ b/config/graphical.nix
@ -1,4 +1,4 @@
-{ config, ... }:
+{ nixos-config, ... }:
 {
  time.timeZone = "Etc/GMT-1";
  isGraphical = true;
@ -6,5 +6,6 @@
    ./kde
    ./documentation.nix
    ./graphical/fonts.nix
+    "${nixos-config}/services/security-key"
  ];
 }
--- a/services/desktop/default.nix
+++ b/services/desktop/default.nix
@ -2,5 +2,6 @@
 {
  imports = [
    ./kdeconnect.nix
+    ./gpg
  ];
 }
--- a/services/desktop/gpg/default.nix
+++ b/services/desktop/gpg/default.nix
@ -0,0 +1,10 @@
+{ config, ... }:
+{
+  programs.gpg = {
+    enable = true;
+    homedir = "${config.xdg.dataHome}/gnupg";
+    mutableKeys = false;
+    mutableTrust = false;
+    scdaemonSettings.disable-ccid = true;
+  };
+}
--- a/services/security-key/default.nix
+++ b/services/security-key/default.nix
@ -0,0 +1,7 @@
+{ ... }:
+{
+  imports = [
+    ./pcscd.nix
+    ./tpm2.nix
+  ];
+}
--- a/services/security-key/pcscd.nix
+++ b/services/security-key/pcscd.nix
@ -0,0 +1,6 @@
+{ ... }:
+{
+  services.pcscd = {
+    enable = true;
+  };
+}
--- a/services/security-key/tpm2.nix
+++ b/services/security-key/tpm2.nix
@ -0,0 +1,11 @@
+{ ... }:
+{
+  security.tpm2 = {
+    enable = true;
+    abrmd.enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+  services.tcsd.enable = true;
+  systemd.tpm2.enable = true;
+}