Personal Nix setup
Add pinentry-touchid
+50
-9
+1
flake.nix
+1
flake.nix
+6
-9
home/base/gpg.nix
+6
-9
home/base/gpg.nix
···
22
22
publicKeys = [
23
23
{ source = ./assets/pubring.asc; trust = "ultimate"; }
24
24
];
25
-
settings = {
26
-
default-key = "DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5";
27
-
keyserver = "hkps://keys.openpgp.org";
28
-
keyserver-options = "auto-key-retrieve";
29
-
};
30
-
scdaemonSettings = {
31
-
disable-ccid = true;
32
-
};
33
25
};
34
26
35
27
services.gpg-agent = {
36
28
enable = true;
37
29
enableSshSupport = true;
38
30
verbose = true;
39
-
pinentry.package = pkgs.pinentry_mac;
40
31
sshKeys = [ "DDA4674BEB2FBE8A1EFB6F542FA66EDC2BFD54F5" ];
32
+
defaultCacheTtl = 1;
33
+
defaultCacheTtlSsh = 1;
34
+
pinentry = helpers.mkIfDarwin {
35
+
package = pkgs.pinentry-touchid;
36
+
program = "pinentry-touchid";
37
+
};
41
38
};
42
39
43
40
systemd.user.services.gpg-agent.Service.Slice = "session.slice";
+1
lib/pkgs/default.nix
+1
lib/pkgs/default.nix
+40
lib/pkgs/pinentry-touchid.nix
+40
lib/pkgs/pinentry-touchid.nix
···
1
+
self: pkgs @ {
2
+
lib,
3
+
buildGoModule,
4
+
fetchFromGitHub,
5
+
...
6
+
}:
7
+
8
+
with lib;
9
+
buildGoModule rec {
10
+
pname = "pinentry-touchid";
11
+
version = "v0.0.5";
12
+
vendorHash = "sha256-3NeKIdsZ7uQQmVXDZ6zUQ0QMF4uxFcUDEOHbPSqoqOg=";
13
+
proxyVendor = true;
14
+
15
+
doCheck = false;
16
+
doInstallCheck = true;
17
+
18
+
src = fetchFromGitHub {
19
+
owner = "kitten";
20
+
repo = "pinentry-touchid";
21
+
rev = "07322ff7e6509a575ce282aeb3b47db74a142a18";
22
+
sha256 = "sha256-anSdpuUbB1VIIaU28kIqLjsdIEAgHxgzSf0g68MK2as=";
23
+
};
24
+
25
+
subPackages = [ "." ];
26
+
buildInputs = with pkgs; [ makeBinaryWrapper ];
27
+
nativeBuildInputs = with pkgs; [ pinentry_mac writableTmpDirAsHomeHook ];
28
+
ldflags = [ "-s" "-w" "-X main.version=${version}" "-X main.commit=${src.rev}" ];
29
+
30
+
patchPhase = ''
31
+
substituteInPlace go.mod \
32
+
--replace-fail "=> ./go-assuan" "=> $src/go-assuan" \
33
+
--replace-fail "=> ./go-touchid" "=> $src/go-touchid"
34
+
'';
35
+
36
+
postInstall = ''
37
+
wrapProgram $out/bin/pinentry-touchid \
38
+
--prefix PATH : ${pkgs.pinentry_mac}/bin
39
+
'';
40
+
}
+2
modules/base/macos.nix
+2
modules/base/macos.nix
···
57
57
"com.apple.TimeMachine".DoNotOfferNewDisksForBackup = true;
58
58
"com.apple.ImageCapture".disableHotPlug = true;
59
59
"com.apple.gamed".Disabled = true;
60
+
"org.gpgtools.common".DisableKeychain = true;
61
+
"org.gpgtools.common".UseKeychain = false;
60
62
"com.apple.dt.XCode".IDEIndexDisable = 1;
61
63
};
62
64
};