summaryrefslogtreecommitdiff
path: root/machines/enzo
diff options
context:
space:
mode:
authorHenry J. Webster <hwebs@hwebs.info>2026-07-30 13:37:08 -0500
committerHenry J. Webster <hwebs@hwebs.info>2026-07-30 13:37:08 -0500
commite9a0007df2deaf3cf988dd9b8c665608f72df52d (patch)
tree8b6727087fa378d23e73a9704ec8caf00f1a1c30 /machines/enzo
parenteee8aa138bf4a78a381ef20e211a46bfd0bf9f91 (diff)
enzo: add gpg (gnupg + gnome3 pinentry agent)
Install gnupg and pinentry-gnome3 and enable programs.gnupg.agent so gpg-agent has a working pinentry from the system config (fixes 'No pinentry' on key import). enableSSHSupport left off to avoid hijacking the ssh-agent socket for the existing SSH key. Assisted-by: Claude:claude-opus-4-8
Diffstat (limited to 'machines/enzo')
-rw-r--r--machines/enzo/desktop.nix8
1 files changed, 8 insertions, 0 deletions
diff --git a/machines/enzo/desktop.nix b/machines/enzo/desktop.nix
index a1c33e3..600f995 100644
--- a/machines/enzo/desktop.nix
+++ b/machines/enzo/desktop.nix
@@ -64,8 +64,16 @@
mako # notifications
libnotify # notify-send
yambar # text status bar
+ gnupg # gpg
+ pinentry-gnome3 # passphrase prompt for the gpg agent
];
+ # --- GPG ---
+ # Agent + a GTK pinentry (works under niri). enableSSHSupport is left off so
+ # gpg-agent doesn't hijack the ssh-agent socket for your existing SSH key;
+ # turn it on only if you sign in via a GPG auth subkey.
+ programs.gnupg.agent.enable = true;
+
# --- Console / greeter font (HiDPI panel) ---
# The eDP panel is high-density, so the kernel VT and tuigreet render with a
# tiny 8x16 font. A large Terminus bitmap font makes the TTY and the greeter