Add gnupg configuration for ssh

diff --git a/config.yaml b/config.yaml
index 9d544f446a37b3c563b634f57f56dc1d10868526..1b13b8e8ac2933adce42134da1119607f398bfdd 100644 (file)
--- a/config.yaml
+++ b/config.yaml
@@ -2,6 +2,7 @@ _comments:
   _need_help: Go see https://github.com/deadc0de6/dotdrop#config
 actions:
   post:
+    protect_read: chmod go-rwx {0}
     make_exec: chmod a+x {0}
     pam_updated: "echo -e \"\\033[00;32m\u26A0\uFE0F \u26A0\uFE0F  You need to log\
       \ out and back in to update your environment \u26A0\uFE0F \u26A0\uFE0F\\033[00m\""
@@ -52,6 +53,8 @@ dotfiles:
   gnupg_config_files:
     dst: ~/.config
     src: gnupg/config_files
+    actions:
+    - protect_read ~/.config/gnupg
   gnupg_systemd_browser_override:
     actions:
     - systemd_daemon_reload
@@ -109,6 +112,8 @@ dotfiles:
     - pam_updated
     dst: ~/.config/pam_environment
     src: pam_environment
+    trans:
+    - gpg_socket_dir
   prog_haskell_ghci:
     dst: ~/.ghc/ghci.conf
     src: programming/haskell/ghci.conf

diff --git a/dotfiles/pam_environment b/dotfiles/pam_environment
index 02741badfb305a686c61e1078a6e538c11a5f058..ce6cb876c7b5c95243883fa5c7894c53b89b4cf0 100644 (file)
--- a/dotfiles/pam_environment
+++ b/dotfiles/pam_environment
@@ -33,6 +33,10 @@ XAUTHORITY                   DEFAULT="${XDG_RUNTIME_DIR}/Xauthority"
 # GPG
 GNUPGHOME                      DEFAULT="${XDG_CONFIG_HOME}/gnupg"
 
+# SSH
+SSH_AGENT_PID                  DEFAULT=
+SSH_AUTH_SOCK                  DEFAULT="${XDG_RUNTIME_DIR}/gnupg/<<<>>>/S.gpg-agent.ssh"
+
 # Less
 LESSHISTFILE                   DEFAULT="${XDG_STATE_HOME}/less/history"
 

diff --git a/dotfiles/password_store b/dotfiles/password_store
index 87c98fd57f606f4f886bd85b3cd705dafff1d3ef..4994e31360fcb24bfa7812c68f6dbadb5ba8cf26 160000 (submodule)
--- a/dotfiles/password_store
+++ b/dotfiles/password_store
@@ -1 +1 @@
-Subproject commit 87c98fd57f606f4f886bd85b3cd705dafff1d3ef
+Subproject commit 4994e31360fcb24bfa7812c68f6dbadb5ba8cf26