From aff435a0fb3a56b1d7b738c7dede363440884b3a Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 15:05:36 +0100
Subject: Add the Canonical laptop profile and setup workflows

---
 private_dot_gnupg/gpg-agent.conf      |  3 ---
 private_dot_gnupg/gpg-agent.conf.tmpl |  7 +++++++
 private_dot_gnupg/gpg.conf            | 11 -----------
 private_dot_gnupg/gpg.conf.tmpl       | 15 +++++++++++++++
 4 files changed, 22 insertions(+), 14 deletions(-)
 delete mode 100644 private_dot_gnupg/gpg-agent.conf
 create mode 100644 private_dot_gnupg/gpg-agent.conf.tmpl
 delete mode 100644 private_dot_gnupg/gpg.conf
 create mode 100644 private_dot_gnupg/gpg.conf.tmpl

(limited to 'private_dot_gnupg')

diff --git a/private_dot_gnupg/gpg-agent.conf b/private_dot_gnupg/gpg-agent.conf
deleted file mode 100644
index 46879fd..0000000
--- a/private_dot_gnupg/gpg-agent.conf
+++ /dev/null
@@ -1,3 +0,0 @@
-enable-ssh-support
-pinentry-program /home/sommerfeld/.nix-profile/bin/pinentry-curses
-allow-loopback-pinentry
diff --git a/private_dot_gnupg/gpg-agent.conf.tmpl b/private_dot_gnupg/gpg-agent.conf.tmpl
new file mode 100644
index 0000000..ca074fb
--- /dev/null
+++ b/private_dot_gnupg/gpg-agent.conf.tmpl
@@ -0,0 +1,7 @@
+enable-ssh-support
+{{ if eq (default "host" (index . "machineRole")) "canonical" }}
+pinentry-program /usr/bin/pinentry-gnome3
+{{ else }}
+pinentry-program {{ .chezmoi.homeDir }}/.nix-profile/bin/pinentry-curses
+{{ end }}
+allow-loopback-pinentry
diff --git a/private_dot_gnupg/gpg.conf b/private_dot_gnupg/gpg.conf
deleted file mode 100644
index 69ceb5a..0000000
--- a/private_dot_gnupg/gpg.conf
+++ /dev/null
@@ -1,11 +0,0 @@
-personal-digest-preferences SHA512
-cert-digest-algo SHA512
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
-personal-cipher-preferences TWOFISH CAMELLIA256 AES 3DES
-
-keyserver-options auto-key-retrieve
-
-keyid-format 0xlong
-with-fingerprint
-
-default-key B79DF5F37D7F9B0F390238D53298945F717C85F8
diff --git a/private_dot_gnupg/gpg.conf.tmpl b/private_dot_gnupg/gpg.conf.tmpl
new file mode 100644
index 0000000..ed5ceb5
--- /dev/null
+++ b/private_dot_gnupg/gpg.conf.tmpl
@@ -0,0 +1,15 @@
+personal-digest-preferences SHA512
+cert-digest-algo SHA512
+default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
+personal-cipher-preferences TWOFISH CAMELLIA256 AES 3DES
+
+keyserver-options auto-key-retrieve
+
+keyid-format 0xlong
+with-fingerprint
+
+{{ if eq (default "host" (index . "machineRole")) "canonical" }}
+default-key {{ .workSigningKey }}
+{{ else }}
+default-key B79DF5F37D7F9B0F390238D53298945F717C85F8
+{{ end }}
-- 
cgit v1.3.1