home-manager: add `isTrusted`

Install and configure some programs only on trusted machines. On trusted
machines, my mails, GPG and a few other things are configured. A machine
where this is not needed on a regular basis to get things done don't
need that much information.

Also rename `desktop/trust` to `trusted`, in case we want these packages
on a host that is not a desktop, and `trusted` is a better description.

1 files changed, 17 insertions, 0 deletions

diff --git a/users/fcuny/trusted/pgp.nix b/users/fcuny/trusted/pgp.nix
new file mode 100644
index 0000000..79ed7dd
--- /dev/null
+++ b/users/fcuny/trusted/pgp.nix
@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.gpg-agent = {
+    enable = true;
+    enableSshSupport = true;
+    pinentryFlavor = "gnome3";
+  };
+
+  programs.gpg = {
+    enable = true;
+    settings = {
+      default-key = "23348B57F01D4234B5CFBA0923208AC01EB6EEA1";
+    };
+  };
+}
+