fix(poppy): disable pinentry external passphrase cache

This commit is contained in:
mikl 2026-09-29 02:04:16 +03:00
commit 630e726f5f

View file

@ -16,8 +16,9 @@
# GPG agent settings (only for GPG/pass, NOT for SSH) # GPG agent settings (only for GPG/pass, NOT for SSH)
services.gpg-agent = { services.gpg-agent = {
enable = true; enable = true;
# Never cache GPG passphrases: pass asks every time. # Neither gpg-agent nor pinentry-mac/Keychain may cache passphrases.
defaultCacheTtl = 0; defaultCacheTtl = 0;
maxCacheTtl = 0; maxCacheTtl = 0;
extraConfig = "no-allow-external-cache";
}; };
} }