gpg

home/lilith/gpg.nix

@@ -1,7 +1,10 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
+{
   programs.gpg = {
     enable = true;
-    settings.trust-model = "tofu+pgp";
+    settings = {
+      trust-model = "tofu+pgp";
+    };
   };
 
   services.gpg-agent = {

home/lilith/hyprland/default.nix

@@ -70,8 +70,6 @@
         allow_tearing = false;
       };
 
-      ecosystem.no_update_news = true;
-
       decoration = {
         rounding = 10;
 

home/lilith/thunderbird.nix

@@ -8,20 +8,18 @@
   programs.thunderbird = {
     enable = true;
     settings = {
-
+      "general.useragent.override" = "";
+      "privacy.donottrackheader.enabled" = true;
+      "mail.openpgp.allow_external_gnupg" = true;
+      "mail.openpgp.fetch_pubkeys_from_gnupg" = true;
     };
+
     profiles."lilith" = {
       isDefault = true;
+      withExternalGnupg = true;
     };
   };
 
-  sops.secrets = {
-    "email/personal/password" = { };
-    "email/uni/password" = { };
-    "email/work/password" = { };
-    "email/fau/password" = { };
-  };
-
   # As this contains personal information, this part of the config has been
   # put in a separate, private repository. Do _not_ use this for actual secrets!
   accounts.email.accounts = flake-private.home.accounts.email.accounts { inherit config; };