{
  lib,
  pkgs,
  ...
}:

{

  home = {
    packages = [ pkgs.pcsctools ];

    shellAliases = {
      gpg-card-relearn = "gpg-connect-agent 'scd serialno' 'learn --force' /bye";
    };
  };

  programs = {
    gpg = {
      enable = true;
      mutableTrust = true;
      mutableKeys = true;
      settings.keyserver = "hkps://keyserver.ubuntu.com:443";
      scdaemonSettings.disable-ccid = true;
    };

    git.signing = {
      format = "openpgp";
      signByDefault = true;
      key = "95F0FE7CD7E6A022";
    };

    sherlock.settings.ignore = "Gscriptor";
  };

  services = {
    gpg-agent = {
      enable = true;
      enableSshSupport = true;
      enableExtraSocket = true;

      pinentry.package = pkgs.pinentry-gnome3;

      defaultCacheTtl = 600;
      defaultCacheTtlSsh = 600;

      sshKeys = [
        # katja@zaphyra.eu
        "595A90924C65444EF00F0890BA85DE2A57DD79B2"
      ];
    };
  };

}