[thunderbird] Sign mail with YubiKey

This commit is contained in:
Tibo De Peuter 2024-03-30 23:05:05 +01:00
parent ff9de17d04
commit 6f5815b392
Signed by: tdpeuter
GPG key ID: 38297DE43F75FFE2
2 changed files with 19 additions and 8 deletions

View file

@ -6,12 +6,14 @@ in {
options.sisyphus.hardware.yubikey.enable = lib.mkEnableOption "YubiKey support"; options.sisyphus.hardware.yubikey.enable = lib.mkEnableOption "YubiKey support";
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
# Enable smart card reading
services.pcscd.enable = true;
programs.gnupg.agent = { programs.gnupg.agent = {
enable = true; enable = true;
pinentryFlavor = "curses"; # TODO Necessary?
# enableSSHSupport = true;
# pinentryFlavor = "curses";
}; };
# Enable smart card reading
services.pcscd.enable = true;
}; };
} }

View file

@ -67,9 +67,13 @@ in {
thunderbird = { thunderbird = {
enable = true; enable = true;
settings = id: { settings = id: {
"mail.server.server_${id}.authMethod" = 10; "mail.server.server_${id}.authMethod" = 10;
"mail.smtpserver.smtp_${id}.authMethod" = 10; "mail.smtpserver.smtp_${id}.authMethod" = 10;
"mail.identity.id_${id}.htmlSigText" = signatures.UGent; "mail.identity.id_${id}.htmlSigText" = signatures.UGent;
# Allow PGP
"mail.identity.id_${id}.openpgp_key_id" = "9B11F5243089DB5B"; # Your 'master' key
"mail.identity.id_${id}.attachPgpKey" = true;
}; };
}; };
}; };
@ -117,10 +121,15 @@ in {
profiles.tdpeuter = { profiles.tdpeuter = {
isDefault = true; isDefault = true;
settings = { settings = {
"mailnews.default_sort_order" = 2; # Sort descending # View
"mailnews.default_sort_order" = 2; # Sort descending
"mailnews.mark_message_read.delay" = true; "mailnews.mark_message_read.delay" = true;
"mailnews.start_page.enabled" = false; "mailnews.start_page.enabled" = false;
"mail.pane_config.dynamic" = 2; # Vertical view "mail.pane_config.dynamic" = 2; # Vertical view
# Encryption
"mail.openpgp.allow_external_gnupg" = true; # Enable YubiKey GPG signing
"mail.e2ee.auto_enable" = true; # Automatically enable encryption when possible.
}; };
}; };
}; };