machines/mermet/security.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 {
   3 security.gnupg.agent = {
   4   keyring."89F52A879E0019A966503AFFDE72EEA84CDFA3A7" = {};
   5 };
   6 services.openssh.extraConfig = ''
   7   # This is for removing remote gpg-agent's socket
   8   StreamLocalBindUnlink yes
   9 '';
  10 }