From afa2c88f6ae90fd47386f74713dc0d8df70ef529 Mon Sep 17 00:00:00 2001
From: Charlotte Van Petegem <charlotte@vanpetegem.me>
Date: Sat, 20 Mar 2021 21:20:49 +0100
Subject: [PATCH] Make sure permissions on .gnupg directory are correct

---
 configurations/gnupg.nix | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/configurations/gnupg.nix b/configurations/gnupg.nix
index 5d9f29d3..68594863 100644
--- a/configurations/gnupg.nix
+++ b/configurations/gnupg.nix
@@ -17,10 +17,11 @@
     { path = ".gnupg/trustdb.gpg"; type = "data"; }
   ];
   config.programs.gnupg.agent.enable = true;
-  config.home-manager.users.charlotte = { pkgs, ... }: {
-    programs = {
-      gpg.enable = true;
-    };
+  config.home-manager.users.charlotte = { lib, ... }: {
+    home.activation.fixPermissionsCommands = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
+      chmod u=rwX,go= /home/charlotte/.gnupg
+    '';
+    programs.gpg.enable = true;
     services.gpg-agent = {
       enable = true;
       defaultCacheTtl = 7200;