gpg

flake.lock

@@ -236,11 +236,11 @@
     },
     "flake-private": {
       "locked": {
-        "lastModified": 1744570005,
-        "narHash": "sha256-SnV4raQWMiysxsZBOq4wrR9kWxF8Fk/Arn9bERr1XOg=",
+        "lastModified": 1745623083,
+        "narHash": "sha256-4dITN4vFrcWv4rwRMDTs/t+8K9coTIU8fA3sGVGb/pA=",
         "ref": "main",
-        "rev": "ce669973291ca0e09677fb2491922ea15562e9ef",
-        "revCount": 2,
+        "rev": "8b6bde50ea541f1154893dbe9ab34f748e4fc706",
+        "revCount": 3,
         "type": "git",
         "url": "ssh://git@git.firelilith.org/lilith/flake-private.git"
       },

home/lilith/gpg.nix

@@ -1,7 +1,10 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
+{
   programs.gpg = {
     enable = true;
-    settings.trust-model = "tofu+pgp";
+    settings = {
+      trust-model = "tofu+pgp";
+    };
   };
 
   services.gpg-agent = {

home/lilith/hyprland/default.nix

@@ -70,8 +70,6 @@
         allow_tearing = false;
       };
 
-      ecosystem.no_update_news = true;
-
       decoration = {
         rounding = 10;
 

home/lilith/thunderbird.nix

@@ -8,20 +8,18 @@
   programs.thunderbird = {
     enable = true;
     settings = {
-
+      "general.useragent.override" = "";
+      "privacy.donottrackheader.enabled" = true;
+      "mail.openpgp.allow_external_gnupg" = true;
+      "mail.openpgp.fetch_pubkeys_from_gnupg" = true;
     };
+
     profiles."lilith" = {
       isDefault = true;
+      withExternalGnupg = true;
     };
   };
 
-  sops.secrets = {
-    "email/personal/password" = { };
-    "email/uni/password" = { };
-    "email/work/password" = { };
-    "email/fau/password" = { };
-  };
-
   # As this contains personal information, this part of the config has been
   # put in a separate, private repository. Do _not_ use this for actual secrets!
   accounts.email.accounts = flake-private.home.accounts.email.accounts { inherit config; };