nix: add git submodule .lib/nixpkgs-commonsoft

[sourcephile-nix.git] / build / modules / gnupg.nix

diff --git a/build/modules/gnupg.nix b/build/modules/gnupg.nix
index 09c63e8ebb43d3acfd43a2202345008f88268d3b..63e01d5341bd68b667de1c17629b79a279d0dc26 100644 (file)
--- a/build/modules/gnupg.nix
+++ b/build/modules/gnupg.nix
@@ -3,19 +3,20 @@
   config = {
     gnupg = {
       enable = true;
+      dir.var = toString ../../../sec/gnupg;
       keys = {
-        "Millogic, Coop. <contact@millogic.coop>" = {
-          uid = "Millogic, Coop. <contact@millogic.coop>";
+        "Commonsoft <root@commonsoft.org>" = {
+          uid = "Commonsoft <root@commonsoft.org>";
           algo   = "rsa4096";
-          expire = "1y";
+          expire = "3y";
           usage  = ["cert" "sign"];
-          passPath = "millogic.coop/gnupg/contact@";
+          passPath = "commonsoft/gpg/root";
           subKeys = [
-            { algo = "rsa4096"; expire = "1y"; usage = ["sign"];}
-            { algo = "rsa4096"; expire = "1y"; usage = ["encrypt"];}
-            { algo = "rsa4096"; expire = "1y"; usage = ["auth"];}
+            { algo = "rsa4096"; expire = "3y"; usage = ["sign"];}
+            { algo = "rsa4096"; expire = "3y"; usage = ["encrypt"];}
+            { algo = "rsa4096"; expire = "3y"; usage = ["auth"];}
             ];
-          backupRecipients = ["@julm@autogeree.net"];
+          backupRecipients = [""];
         };
       };
     };