This repository has no description
773 B
31 lines
1{
2 pkgs,
3 lib,
4 ...
5}:
6{
7 environment.systemPackages = with pkgs; [
8 yubikey-personalization
9 yubikey-manager
10 pinentry-curses
11 pinentry-qt
12 ];
13
14 services.udev.packages = with pkgs; [ yubikey-personalization ];
15
16 services.pcscd.enable = true;
17
18 programs.gnupg.agent = {
19 enable = true;
20 # Sets up the gpg-agent-ssh.socket unit so gpg-agent (running in
21 # --supervised mode) actually receives an ssh listen fd. The module
22 # also exports SSH_AUTH_SOCK in environment.extraInit, which we
23 # don't want system-wide — unset it again below so users opt in via:
24 # SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)" ssh ...
25 enableSSHSupport = true;
26 };
27
28 environment.extraInit = lib.mkAfter ''
29 unset SSH_AUTH_SOCK
30 '';
31}