initial support for gpg

config/graphical.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ nixos-config, ... }:
 {
   time.timeZone = "Etc/GMT-1";
   isGraphical = true;
@@ -6,5 +6,6 @@
     ./kde
     ./documentation.nix
     ./graphical/fonts.nix
+    "${nixos-config}/services/security-key"
   ];
 }

services/desktop/default.nix

@@ -2,5 +2,6 @@
 {
   imports = [
     ./kdeconnect.nix
+    ./gpg
   ];
 }

services/desktop/gpg/default.nix

@@ -0,0 +1,10 @@
+{ config, ... }:
+{
+  programs.gpg = {
+    enable = true;
+    homedir = "${config.xdg.dataHome}/gnupg";
+    mutableKeys = false;
+    mutableTrust = false;
+    scdaemonSettings.disable-ccid = true;
+  };
+}

services/security-key/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  imports = [
+    ./pcscd.nix
+    ./tpm2.nix
+  ];
+}

services/security-key/pcscd.nix

@@ -0,0 +1,6 @@
+{ ... }:
+{
+  services.pcscd = {
+    enable = true;
+  };
+}

services/security-key/tpm2.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  security.tpm2 = {
+    enable = true;
+    abrmd.enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+  services.tcsd.enable = true;
+  systemd.tpm2.enable = true;
+}