feat: add gpg agent
This commit is contained in:
parent
7baca262a6
commit
4bdd918479
2 changed files with 65 additions and 0 deletions
|
|
@ -7,5 +7,6 @@
|
||||||
imports = [
|
imports = [
|
||||||
./flatpak.nix
|
./flatpak.nix
|
||||||
./wireshark.nix
|
./wireshark.nix
|
||||||
|
./gpg.nix
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
|
||||||
64
Modules/System/Application/Special-Applications/gpg.nix
Normal file
64
Modules/System/Application/Special-Applications/gpg.nix
Normal file
|
|
@ -0,0 +1,64 @@
|
||||||
|
# GPG (System Module)
|
||||||
|
#
|
||||||
|
# Provides:
|
||||||
|
# - GnuPG installation (gpg, pinentry)
|
||||||
|
# - gpg-agent system service (with optional SSH support)
|
||||||
|
# - Desktop secrets integration (gnome-keyring, seahorse)
|
||||||
|
#
|
||||||
|
# Options:
|
||||||
|
# - enable -> Enable GnuPG system module
|
||||||
|
# - enableSSHSupport -> Enable SSH agent emulation in gpg-agent
|
||||||
|
# - enableSeahorse -> Enable Seahorse (GUI key manager)
|
||||||
|
# - pinentry.package -> Pinentry package (default: pkgs.pinentry-all)
|
||||||
|
#
|
||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
cfg = config.nyx-module.system.gpg;
|
||||||
|
in {
|
||||||
|
options.nyx-module.system.gpg = {
|
||||||
|
enable = lib.mkEnableOption "Enable GnuPG (system module)";
|
||||||
|
|
||||||
|
enableSSHSupport = lib.mkOption {
|
||||||
|
type = lib.types.bool;
|
||||||
|
default = false;
|
||||||
|
description = ''
|
||||||
|
Enable SSH agent emulation support in gpg-agent.
|
||||||
|
This allows you to use your GPG keys for SSH authentication.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
enableSeahorse = lib.mkEnableOption "Enable Seahorse (GUI key manager)";
|
||||||
|
|
||||||
|
pinentry.package = lib.mkOption {
|
||||||
|
type = lib.types.package;
|
||||||
|
default = pkgs.pinentry-all;
|
||||||
|
description = ''
|
||||||
|
The pinentry package to use.
|
||||||
|
By default, `pkgs.pinentry-all` is installed, which includes
|
||||||
|
all common backends (tty, curses, gtk2, qt, gnome3).
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
config = lib.mkIf cfg.enable {
|
||||||
|
# Enable gpg-agent with optional SSH support
|
||||||
|
programs.gnupg.agent = {
|
||||||
|
enable = true;
|
||||||
|
enableSSHSupport = cfg.enableSSHSupport;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Enable gnome-keyring (for desktop secret storage)
|
||||||
|
services.gnome.gnome-keyring.enable = true;
|
||||||
|
|
||||||
|
# Optional GUI for secrets management
|
||||||
|
programs.seahorse.enable = cfg.enableSeahorse;
|
||||||
|
|
||||||
|
# Base packages + user-supplied pinentry
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
gnupg
|
||||||
|
gnome-keyring
|
||||||
|
cfg.pinentry.package
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue