feat: improve yubikey related setting

profiles/common/home/gpg-agent.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ self, pkgs, ... }:
 {
   services.gpg-agent = {
     enable = true;
@@ -11,5 +11,24 @@
       allow-loopback-pinentry
       allow-emacs-pinentry
     '';
+    sshKeys = [
+      "4BE7925262289B476DBBC17B76FD3810215AE097"
+    ];
   };
+
+  programs.gpg = {
+    enable = true;
+    publicKeys = [
+      {
+        source = "${self}/secrets/keys/gpg/gpg-public-key-0x76FD3810215AE097.asc";
+        trust = 5;
+      }
+    ];
+  };
+
+  # assure correct permissions
+  systemd.user.tmpfiles.rules = [
+    "d /home/swarsel/.gnupg 700 swarsel users"
+  ];
+
 }

profiles/common/home/sops.nix

@@ -17,6 +17,7 @@ in
       leon = { path = "/run/user/1000/secrets/leon"; };
       swarselmail = { path = "/run/user/1000/secrets/swarselmail"; };
       github_notif = { path = "/run/user/1000/secrets/github_notif"; };
+      u2f_keys = { path = "${config.home.homeDirectory}/.config/Yubico/u2f_keys"; };
     };
   };
 }