From c46e4b36f96ab2237124aa54e8226fd4c0b56603 Mon Sep 17 00:00:00 2001
From: mikl <mikl@iscg.dev>
Date: Tue, 29 Sep 2026 01:36:06 +0300
Subject: [PATCH] fix: disable gpg passphrase caching

---
 home/pass.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/home/pass.nix b/home/pass.nix
index 859580b..bdd5b62 100644
--- a/home/pass.nix
+++ b/home/pass.nix
@@ -16,7 +16,8 @@
   # GPG agent settings (only for GPG/pass, NOT for SSH)
   services.gpg-agent = {
     enable = true;
-    defaultCacheTtl = 600;
-    maxCacheTtl = 600;
+    # Never cache GPG passphrases: pass asks every time.
+    defaultCacheTtl = 0;
+    maxCacheTtl = 0;
   };
 }