primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2026-02-02 23:19:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

home/gpg: remove public keys import

Browse source
This commit is contained in:
Primrose 2026-02-01 21:35:38 +01:00
parent a2817fef0d
commit e701910524
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
1 changed files with 0 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

52
nix/homeModules/common/gpg.nix
View file

@ -4,56 +4,4 @@
gpg-agent.defaultCacheTtl = 1209600; gpg-agent.defaultCacheTtl = 1209600;
gpg-agent.pinentry.package = pkgs.pinentry-tty; gpg-agent.pinentry.package = pkgs.pinentry-tty;
}; };
# Fun video btw
# https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i
programs.gpg.publicKeys =
let
fromUrl =
{
url,
hash,
# https://security.stackexchange.com/a/69089
# One lower than ultimate (introducer in the web of trust) is good enough.
trust ? 4,
}:
{
source = pkgs.fetchurl { inherit url hash; };
inherit trust;
};
github =
{ user, ... }@args:
fromUrl (builtins.removeAttrs args [ "user" ] // { url = "https://github.com/${user}.gpg"; });
in
map github [
# Do not depend on my own forgejo instance / self-host server to avoid a single point of failure
{
user = "leana8959";
hash = "sha256-Y+v/8bLkyUIe4vjToChQP3ChPxRV/DqI72OTsx6F0oo=";
trust = 5;
}
{
user = "vanilla-extracts";
hash = "sha256-6JulBVFmbOHAI7tHiS0Q7L5oQVOXtkUmOLz3+Yz27ec=";
}
{
user = "jappeace";
hash = "sha256-wJ4hiE7M7dcEMaE8waNZEi+tybpVIsFzoeDJhIIaLhk=";
}
{
user = "confusedkernel";
hash = "sha256-9DdtDAcv+2Z0jJMSLAXbp5ne8uHYj5V/lNGi0kKSdv4=";
}
{
user = "gautaz";
hash = "sha256-j0I9l8uKfzKNrc2qveFi5mkRppxL36+BUEqvFPs6vqA=";
}
]
++ map fromUrl [
{
url = "https://eragon.re/pubkey.asc";
hash = "sha256-xvNB+BxqxHqdVBnMhzX3eenN3KmjmdATFPHkPUGweAA=";
}
];
} }