{config, ...}:
{
  config = {
    gnupg = {
      enable = true;
      keys = {
        "Commonsoft <contact@commonsoft.coop>" = {
          uid = "Commonsoft <contact@commonsoft.coop>";
          algo   = "rsa4096";
          expire = "1y";
          usage  = ["cert" "sign"];
          passPath = "commonsoft.coop/gnupg/contact@";
          subKeys = [
            { algo = "rsa4096"; expire = "1y"; usage = ["sign"];}
            { algo = "rsa4096"; expire = "1y"; usage = ["encrypt"];}
            { algo = "rsa4096"; expire = "1y"; usage = ["auth"];}
            ];
          backupRecipients = ["@julm@autogeree.net"];
        };
      };
    };
  };
}