ducks

hosts/nas/services.nix

@@ -213,13 +213,19 @@ in
     protonmail-bridge = {
       description = "Protonmail Bridge";
       enable = true;
+      environment = {
+        GNUPGHOME = "%h/.gnupg";
+        PASSWORD_STORE_DIR = "%h/.password-store";
+      };
       script = "${pkgs.protonmail-bridge}/bin/protonmail-bridge --noninteractive";
       path = [
+        pkgs.gnome-keyring
+        pkgs.gnupg
         pkgs.pass
         pkgs.protonmail-bridge
       ];
-      wantedBy = [ "multi-user.target" ];
-      partOf = [ "multi-user.target" ];
+      wantedBy = [ "default.target" ];
+      after = [ "gpg-agent.service" ];
     };
   };
 
@@ -297,6 +303,16 @@ in
     };
   };
 
+  security.pam.services.login.enableGnomeKeyring = true;
+  # Configure gpg-agent to cache keys
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+    # Set how long to cache the passphrase (in seconds)
+    # defaultCacheTtl = 34560;
+    # maxCacheTtl = 34560;
+  };
+
   # Create a timer to run the service periodically
   systemd.timers.system-update-check = {
     description = "Timer for system configuration updates";