gpg: add it

home/gpg.nix

@@ -0,0 +1,20 @@
+{ pkgs, ... }: {
+  programs.gpg = {
+    enable = true;
+    mutableKeys = false;
+    mutableTrust = false;
+    publicKeys = [
+      {
+        source = ./wlcx_gpg_public.asc;
+        trust = "ultimate";
+      }
+      {
+        source = ./yubikey_pgp_public.asc;
+        trust = "ultimate";
+      }
+    ];
+    # make yubikey work on macos? lolgpg
+    # https://github.com/NixOS/nixpkgs/issues/155629
+    scdaemonSettings = { disable-ccid = true; };
+  };
+}

home/profiles.nix

@@ -11,6 +11,7 @@
       ./vim.nix
       ./vim-dev.nix
       ./passwords.nix
+      ./gpg.nix
     ];
   };
   server = { ... }: { imports = [ ./default.nix ./git.nix ./vim.nix ]; };