update

user/programs/gnupg/default.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }:
+
+{
+  home.file = {
+    ".gnupg" = {
+      source = ./files;
+      recursive = true;
+    };
+  };
+}

user/programs/gnupg/files/gpg-agent.conf

@@ -0,0 +1,10 @@
+# https://github.com/drduh/config/blob/master/gpg-agent.conf
+# https://www.gnupg.org/documentation/manuals/gnupg/Agent-Options.html
+enable-ssh-support
+default-cache-ttl 60
+max-cache-ttl 120
+#pinentry-program /usr/bin/pinentry-curses
+#pinentry-program /usr/bin/pinentry-curses
+#pinentry-program /usr/local/bin/pinentry-curses
+pinentry-program /run/current-system/sw/bin/pinentry-gnome3
+

user/programs/gnupg/files/gpg.conf

@@ -0,0 +1,54 @@
+# https://github.com/drduh/config/blob/master/gpg.conf
+# https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html
+# https://www.gnupg.org/documentation/manuals/gnupg/GPG-Esoteric-Options.html
+# Use AES256, 192, or 128 as cipher
+personal-cipher-preferences AES256 AES192 AES
+# Use SHA512, 384, or 256 as digest
+personal-digest-preferences SHA512 SHA384 SHA256
+# Use ZLIB, BZIP2, ZIP, or no compression
+personal-compress-preferences ZLIB BZIP2 ZIP Uncompressed
+# Default preferences for new keys
+default-preference-list SHA512 SHA384 SHA256 AES256 AES192 AES ZLIB BZIP2 ZIP Uncompressed
+# SHA512 as digest to sign keys
+cert-digest-algo SHA512
+# SHA512 as digest for symmetric ops
+s2k-digest-algo SHA512
+# AES256 as cipher for symmetric ops
+s2k-cipher-algo AES256
+# UTF-8 support for compatibility
+charset utf-8
+# Show Unix timestamps
+fixed-list-mode
+# No comments in signature
+no-comments
+# No version in signature
+no-emit-version
+# Long hexidecimal key format
+keyid-format 0xlong
+# Display UID validity
+list-options show-uid-validity
+verify-options show-uid-validity
+# Display all keys and their fingerprints
+with-fingerprint
+# Display key origins and updates
+#with-key-origin
+# Cross-certify subkeys are present and valid
+require-cross-certification
+# Disable caching of passphrase for symmetrical ops
+no-symkey-cache
+# Enable smartcard
+use-agent
+# Disable recipient key ID in messages
+throw-keyids
+# Default/trusted key ID to use (helpful with throw-keyids)
+default-key 0xE38E38DDAF34677F
+#trusted-key 0xFF3E7D88647EBCDB
+# Keyserver URL
+#keyserver hkps://pgp.mit.edu
+#keyserver hkps://hkps.pool.sks-keyservers.net
+#keyserver hkps://keys.openpgp.org
+keyserver hkps://keyserver.ubuntu.com:443
+#keyserver hkps://pgp.ocf.berkeley.edu
+# Proxy to use for keyservers
+#keyserver-options http-proxy=socks5-hostname://127.0.0.1:9050
+