nixos-config/home-manager/gpg/default.nix

{ config, lib, pkgs, user, ... }:

{
  services.gpg-agent = {
    enable = true;
    enableZshIntegration = true;
    pinentryFlavor = "gnome3";
  };

  programs.gpg = {
    enable = true;
    mutableKeys = false;
    mutableTrust = false;
    publicKeys = [{
      source = ./pubring.asc;
      trust = "ultimate";
    }];
  };
}