diff --git a/home/gpg.nix b/home/gpg.nix
new file mode 100644
index 0000000..ad513fe
--- /dev/null
+++ b/home/gpg.nix
@@ -0,0 +1,20 @@
+{ pkgs, ... }: {
+  programs.gpg = {
+    enable = true;
+    mutableKeys = false;
+    mutableTrust = false;
+    publicKeys = [
+      {
+        source = ./wlcx_gpg_public.asc;
+        trust = "ultimate";
+      }
+      {
+        source = ./yubikey_pgp_public.asc;
+        trust = "ultimate";
+      }
+    ];
+    # make yubikey work on macos? lolgpg
+    # https://github.com/NixOS/nixpkgs/issues/155629
+    scdaemonSettings = { disable-ccid = true; };
+  };
+}
diff --git a/home/profiles.nix b/home/profiles.nix
index 7a3ae40..1a565e5 100644
--- a/home/profiles.nix
+++ b/home/profiles.nix
@@ -11,6 +11,7 @@
       ./vim.nix
       ./vim-dev.nix
       ./passwords.nix
+      ./gpg.nix
     ];
   };
   server = { ... }: { imports = [ ./default.nix ./git.nix ./vim.nix ]; };