fix: s/mime verification failed in gpg using neomutt

config/ghostty/config

@@ -55,6 +55,7 @@ theme               = noctis-azureus
 # palette = 15=#b5bfe2
 
 keybind = all:ctrl+shift+period=text:\x1b\x1f\x4c\x23\x1f
-keybind = shift+enter=text:\n
+# keybind = shift+enter=text:\n
+keybind = shift+enter=text:\x1b\r
 keybind = ctrl+left_bracket=text:\x1b
 # keybind = ctrl+a=text:\x01

config/home/.gnupg/gpgsm.conf

@@ -0,0 +1,4 @@
+# Disable CRL checking to prevent hangs
+disable-crl-checks
+# Also disable OCSP
+disable-ocsp

config/home/.gnupg/trustlist.txt

@@ -0,0 +1,2 @@
+# HARICA Client RSA Root CA 2021
+46:C6:90:0A:77:3A:B6:BC:F4:65:AD:AC:FC:E3:F7:07:00:6E:DE:6E S relax

config/neomutt/neomuttrc

@@ -16,7 +16,10 @@ set attach_save_dir = "~/"
 # General settings
 set color_directcolor = yes
 set implicit_autoview = yes
+# S/MIME and crypto settings
 set crypt_use_gpgme = yes
+set crypt_auto_smime = no
+set smime_is_default = no
 set wait_key = no
 unset mark_old
 alternative_order text/enriched text/plain text

config/nvim/init.lua

@@ -261,6 +261,11 @@ later(function()
       ['<C-n>'] = 'j',
       -- Preview with Ctrl+Space
       ['<C-Space>'] = 'actions.preview',
+      -- Tmux navigation
+      ['<C-h>'] = function() require('tmux').move_left() end,
+      ['<C-j>'] = function() require('tmux').move_bottom() end,
+      ['<C-k>'] = function() require('tmux').move_top() end,
+      ['<C-l>'] = function() require('tmux').move_right() end,
       -- Copy current directory path to clipboard
       ['gy'] = {
         callback = function()

config/spotify-player/app.toml

@@ -1,4 +1,5 @@
 theme = "noctis_azureus"
+client_id = "9fe4fbbcf6204173a91b03be52848142"
 client_port = 8080
 login_redirect_uri = "http://127.0.0.1:8989/login"
 playback_format = """

home/default.nix

@@ -9,6 +9,7 @@
     ./email
     ./emacs.nix
     ./git.nix
+    ./gpg.nix
     ./gui.nix
     ./latex.nix
     ./neovim.nix
@@ -18,13 +19,6 @@
   ];
 
   config = {
-    services = {
-      gpg-agent = {
-        enable = true;
-        # enableSshSupport = true;
-      };
-    };
-
     fonts.fontconfig.enable = true;
 
     programs = {
@@ -42,9 +36,6 @@
         enableZshIntegration = config.programs.zsh.enable;
         nix-direnv.enable = true;
       };
-      gpg = {
-        enable = true;
-      };
       bat = {
         enable = true;
         extraPackages = [

home/gpg.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  dots,
+  ...
+}:
+{
+  services.gpg-agent = {
+    enable = true;
+    # enableSshSupport = true;
+  };
+
+  programs.gpg.enable = true;
+
+  # gpgsm config for S/MIME
+  home.file = {
+    ".gnupg/gpgsm.conf".source =
+      config.lib.file.mkOutOfStoreSymlink "${dots}/config/home/.gnupg/gpgsm.conf";
+    ".gnupg/trustlist.txt".source =
+      config.lib.file.mkOutOfStoreSymlink "${dots}/config/home/.gnupg/trustlist.txt";
+  };
+}

hosts/dango/default.nix

@@ -78,6 +78,7 @@
     wget
     igv
     claude-code
+    codex
     nodejs_24
     ghidra-bin
   ];