{
  config,
  dots,
  ...
}:
{
  services.gpg-agent = {
    enable = true;
    # enableSshSupport = true;
  };

  programs.gpg.enable = true;

  # gpgsm config for S/MIME
  home.file = {
    ".gnupg/gpgsm.conf".source =
      config.lib.file.mkOutOfStoreSymlink "${dots}/config/home/.gnupg/gpgsm.conf";
    ".gnupg/trustlist.txt".source =
      config.lib.file.mkOutOfStoreSymlink "${dots}/config/home/.gnupg/trustlist.txt";
  };
}