Move some (all) files around

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/common/user/configs/console/gpg-agent/default.nix

@@ -0,0 +1,75 @@
+{
+  user ? throw "user argument is required",
+}:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  hmConfig = config.home-manager.users.${user.name};
+  gpgPath = "${hmConfig.xdg.dataHome}/gnupg";
+in
+{
+  home-manager.users.${user.name} = {
+    programs.gpg = {
+      enable = true;
+      homedir = gpgPath;
+    };
+
+    services.gpg-agent = {
+      enable = true;
+      defaultCacheTtl = 31536000;
+      maxCacheTtl = 31536000;
+    };
+
+    systemd.user = {
+      services.gpg-agent-import =
+        let
+          init = lib.meta.getExe (
+            pkgs.writeShellApplication {
+              name = "import-gpg-keys";
+              runtimeInputs = with pkgs; [
+                coreutils
+                gnugrep
+                gnupg
+              ];
+              runtimeEnv = {
+                GNUPGHOME = gpgPath;
+                HOME = user.home;
+              };
+              text = builtins.readFile ./import-gpg-keys.sh;
+            }
+          );
+        in
+        {
+          Unit = {
+            Description = "Auto-import GPG keys";
+            Requires = [
+              "sops-nix.service"
+              "gpg-agent.socket"
+            ];
+            After = [
+              "sops-nix.service"
+              "gpg-agent.socket"
+            ];
+          };
+
+          Service = {
+            Type = "oneshot";
+            ExecStart = init;
+          };
+
+          Install.WantedBy = [ "default.target" ];
+        };
+
+      tmpfiles.rules = [ "d ${gpgPath} 0700 ${user.name} users -" ];
+    };
+
+    sops.secrets = {
+      "gpg-agent/pgp.key" = { };
+      "gpg-agent/pgp.pass" = { };
+    };
+  };
+}

hosts/common/user/configs/console/gpg-agent/import-gpg-keys.sh

@@ -0,0 +1,16 @@
+for keyfile in "$HOME"/.config/sops-nix/secrets/gpg-agent/*.key; do
+  passfile="${keyfile%.key}.pass"
+
+  if [ -f "$passfile" ]; then
+    gpg2 --batch --yes --pinentry-mode loopback --passphrase-file "$passfile" --import "$keyfile"
+  else
+    gpg2 --batch --yes --import "$keyfile"
+  fi
+
+  gpg2 --with-colons --import-options show-only --import "$keyfile" | grep '^fpr' | cut -d: -f10 | while read -r KEY_ID; do
+    echo "$KEY_ID:6:" >> "$GNUPGHOME"/otrust.txt
+  done
+done
+
+gpg2 --import-ownertrust "$GNUPGHOME"/otrust.txt
+rm "$GNUPGHOME"/otrust.txt