39 lines
1.3 KiB
Nix
39 lines
1.3 KiB
Nix
{pkgs, ...}: {
|
|
programs.gpg = {
|
|
enable = true;
|
|
settings = {
|
|
personal-cipher-preferences = "AES256 AES192 AES";
|
|
personal-digest-preferences = "SHA512 SHA384 SHA256";
|
|
personal-compress-preferences = "ZLIB BZIP2 ZIP Uncompressed";
|
|
default-preference-list = "SHA512 SHA384 SHA256 AES256 AES192 AES ZLIB BZIP2 ZIP Uncompressed";
|
|
cert-digest-algo = "SHA512";
|
|
s2k-digest-algo = "SHA512";
|
|
s2k-cipher-algo = "AES256";
|
|
charset = "utf-8";
|
|
fixed-list-mode = true;
|
|
no-comments = true;
|
|
no-emit-version = true;
|
|
no-greeting = true;
|
|
keyid-format = "0xlong";
|
|
list-options = "show-uid-validity";
|
|
verify-options = "show-uid-validity";
|
|
with-fingerprint = true;
|
|
with-key-origin = true;
|
|
require-cross-certification = true;
|
|
no-symkey-cache = true;
|
|
use-agent = true;
|
|
throw-keyids = true;
|
|
default-key = "0x7D5107866B1C6752";
|
|
trusted-key = "0x7D5107866B1C6752";
|
|
keyserver = "hkps://keys.openpgp.org";
|
|
};
|
|
scdaemonSettings = {
|
|
card-timeout = "60";
|
|
pcsc-shared = true;
|
|
# shared-access = true;
|
|
disable-ccid = true;
|
|
pcsc-driver = "${pkgs.pcsclite.out}/lib/libpcsclite.so";
|
|
reader-port = "Yubico Yubi";
|
|
};
|
|
};
|
|
}
|