gnupg

nix/home-manager/no-gui.nix

@@ -2,6 +2,8 @@
   pkgs,
   inputs,
   lib,
+  homeDirectory,
+  config,
   ...
 }:
 {
@@ -164,6 +166,24 @@
     };
   };
 
+  age.secrets.gnupg = {
+    file = ./secrets/gnupg.age;
+    path = "${homeDirectory}/.secrets/gnupg.tar";
+  };
+
+  home.activation.extractGnuPG =
+    let
+      gnupg_dir = "${homeDirectory}/.gnupg";
+    in
+    ''
+      #!/bin/sh
+      rm -fr ${gnupg_dir} || true
+      mkdir -p ${gnupg_dir}
+      ${pkgs.gnutar}/bin/tar xf ${config.age.secrets.gnupg.path} -C ${gnupg_dir}
+      find ${gnupg_dir} -type f -exec chmod 600 {} \;
+      find ${gnupg_dir} -type d -exec chmod 700 {} \;
+    '';
+
   #fish shell!
   programs.fish = import ./progs/fish.nix { inherit pkgs; };