This repository has no description
yubikey: dont set SSH_AUTH_SOCK
author
lassulus
date
(Apr 30, 2026, 12:18 PM CEST)
commit
b9a43eb2
b9a43eb2c29c9c597aacfab1941185a0bc4a3440
parent
4bfa71a2
4bfa71a20f256708a09b6eff6012310e82933b54
+9
+9
2configs/yubikey.nix
+9
2configs/yubikey.nix
···
13
13
services.udev.packages = with pkgs; [ yubikey-personalization ];
14
14
15
15
services.pcscd.enable = true;
16
+
17
+
programs.gnupg.agent = {
18
+
enable = true;
19
+
# Don't use enableSSHSupport: it would override SSH_AUTH_SOCK system-wide.
20
+
# We still want gpg-agent to expose its ssh socket so it can be used
21
+
# on demand via:
22
+
# SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)" ssh ...
23
+
settings.enable-ssh-support = true;
24
+
};
16
25
}