further gpg-ssh edits

home-modules/gpg.nix

@@ -1,11 +1,5 @@
-{ pkgs, ... }@all: with all;
-{
-  # there also is a system module
-  home.packages = with pkgs; [
-    gpg-tui
-    pinentry-all
-  ];
-
+{ pkgs, ... }@all: with all; {
+  home.packages = with pkgs; [ pinentry-all ];
   programs.gpg = {
     enable = true;
     package = pkgs.gnupg;
@@ -33,4 +27,24 @@
       with-fingerprint = true;
     };
   };
+  services.gpg-agent = let 
+    min2sec = min: (min * 60);
+  in {
+    enable = false;
+    verbose = true;
+    sshKeys = [
+      "97081264F7FD72D890D496E839AA9A4C7892A7D8" # Keygrip (not Fingerprint!) of [A] Subkey
+    ];
+    enableSshSupport = true;
+    enableFishIntegration = true;
+    defaultCacheTtlSsh = min2sec 60;
+    defaultCacheTtl = min2sec 30;
+    pinentry = {
+      package = pkgs.pinentry;
+      program = "pinentry";
+    };
+    extraConfig = ''
+      allow-loopback-pinentry
+    '';
+  };
 }