services.gpg-agent.enable
Whether to enable GnuPG private key agent.
Type: boolean
Default:
false
Example:
true
Declared by:
services.gpg-agent.enableBashIntegration
Whether to enable Bash integration.
Type: boolean
Example:
false
Declared by:
services.gpg-agent.enableExtraSocket
Whether to enable extra socket of the GnuPG key agent (useful for GPG Agent forwarding).
Type: boolean
Default:
false
Declared by:
services.gpg-agent.enableFishIntegration
Whether to enable Fish integration.
Type: boolean
Example:
false
Declared by:
services.gpg-agent.enableNushellIntegration
Whether to enable Nushell integration.
Type: boolean
Example:
false
Declared by:
services.gpg-agent.enableScDaemon
Make use of the scdaemon tool. This option has the effect of
enabling the ability to do smartcard operations. When
disabled, this option passes
disable-scdaemon setting to gpg-agent.
Type: boolean
Default:
true
Declared by:
services.gpg-agent.enableSshSupport
Whether to use the GnuPG key agent for SSH keys.
Type: boolean
Default:
false
Declared by:
services.gpg-agent.enableZshIntegration
Whether to enable Zsh integration.
Type: boolean
Example:
false
Declared by:
services.gpg-agent.defaultCacheTtl
Set the time a cache entry is valid to the given number of seconds.
Type: null or signed integer
Default:
null
Declared by:
services.gpg-agent.defaultCacheTtlSsh
Set the time a cache entry used for SSH keys is valid to the given number of seconds.
Type: null or signed integer
Default:
null
Declared by:
services.gpg-agent.extraConfig
Extra configuration lines to append to the gpg-agent configuration file.
Type: strings concatenated with ā\nā
Default:
""
Example:
''
allow-emacs-pinentry
allow-loopback-pinentry
''
Declared by:
services.gpg-agent.grabKeyboardAndMouse
Tell the pinentry to grab the keyboard and mouse. This
option should in general be used to avoid X-sniffing
attacks. When disabled, this option passes
no-grab setting to gpg-agent.
Type: boolean
Default:
true
Declared by:
services.gpg-agent.maxCacheTtl
Set the maximum time a cache entry is valid to n seconds. After this time a cache entry will be expired even if it has been accessed recently or has been set using gpg-preset-passphrase. The default is 2 hours (7200 seconds).
Type: null or signed integer
Default:
null
Declared by:
services.gpg-agent.maxCacheTtlSsh
Set the maximum time a cache entry used for SSH keys is valid to n seconds. After this time a cache entry will be expired even if it has been accessed recently or has been set using gpg-preset-passphrase. The default is 2 hours (7200 seconds).
Type: null or signed integer
Default:
null
Declared by:
services.gpg-agent.noAllowExternalCache
Tell Pinentry not to enable features which use an external cache for passphrases.
Some desktop environments prefer to unlock all credentials with one master password and may have installed a Pinentry which employs an additional external cache to implement such a policy. By using this option the Pinentry is advised not to make use of such a cache and instead always ask the user for the requested passphrase.
Type: boolean
Default:
false
Declared by:
services.gpg-agent.pinentry.package
The pinentry-gnome3 package to use. Which pinentry interface to use. If not null, it sets
pinentry-program in gpg-agent.conf. Beware that
pinentry-gnome3 may not work on non-GNOME systems. You can fix it by
adding the following to your configuration:
home.packages = [ pkgs.gcr ];
Type: null or package
Default:
null
Declared by:
services.gpg-agent.pinentry.program
Which program to search for in the configured pinentry.package.
Type: null or string
Default:
null
Example:
"pinentry-wayprompt"
Declared by:
services.gpg-agent.sshKeys
Which GPG keys (by keygrip) to expose as SSH keys.
Type: null or (list of string)
Default:
null
Declared by:
services.gpg-agent.verbose
Whether to produce verbose output.
Type: boolean
Default:
false
Declared by: