set -eu
set -o pipefail
${info}
- ${pkgs.coreutils}/bin/install -dm0700 -D ${gnupg.gnupgHome}
- ${pkgs.coreutils}/bin/ln -snf ${gnupg.gpgConf} ${gnupg.gnupgHome}/gpg.conf
- ${pkgs.coreutils}/bin/ln -snf ${gnupg.gpgAgentConf} ${gnupg.gnupgHome}/gpg-agent.conf
- ${pkgs.coreutils}/bin/ln -snf ${gnupg.dirmngrConf} ${gnupg.gnupgHome}/dirmngr.conf
'' +
generateKeys gnupg.keys
);
};
gpgConf = lib.mkOption {
type = types.lines;
- apply = s: pkgs.writeText "gpg.conf" s;
+ apply = s: pkgs.writeText "gpg.conf" (s+"\n"+gnupg.gpgExtraConf);
default = ''
auto-key-locate keyserver
cert-digest-algo SHA512
GnuPG's gpg.conf content.
'';
};
+ gpgExtraConf = lib.mkOption {
+ type = types.lines;
+ default = "";
+ description = ''
+ GnuPG's gpg.conf extra content.
+ '';
+ };
};
config = lib.mkIf gnupg.enable {
nix-shell.buildInputs = [
];
nix-shell.shellHook = ''
# gnupg
+ ${pkgs.coreutils}/bin/install -dm0700 -D ${gnupg.gnupgHome}
+ ${pkgs.coreutils}/bin/ln -snf ${gnupg.gpgConf} ${gnupg.gnupgHome}/gpg.conf
+ ${pkgs.coreutils}/bin/ln -snf ${gnupg.gpgAgentConf} ${gnupg.gnupgHome}/gpg-agent.conf
+ ${pkgs.coreutils}/bin/ln -snf ${gnupg.dirmngrConf} ${gnupg.gnupgHome}/dirmngr.conf
export GNUPGHOME=${gnupg.gnupgHome}
install -dm700 "$GNUPGHOME"
export GPG_TTY=$(${pkgs.coreutils}/bin/tty)