edit-secrets: configure gpg-agent/emacs

Emacs/gpg-agent need these settings so you can type directly into the
minibuffer when opening GPG encrypted files.

Change-Id: Ibdc132629f2e87b5a4a7b6222cd93f20e2321a5a
changes/45/863445/1
Ian Wienand 5 months ago
parent ad46c912f3
commit 35fff9759b
No known key found for this signature in database

@ -3,3 +3,33 @@
mode: 0750
src: edit-secrets
dest: /usr/local/bin/edit-secrets
- name: Add required emacs configuration
lineinfile:
path: /root/.emacs
regexp: 'epg-pinentry-mode'
line: "(setq epg-pinentry-mode 'loopback)"
state: present
create: yes
owner: root
group: root
mode: '0644'
- name: Ensure gnupg directory
file:
path: /root/.gnupg
state: directory
owner: root
group: root
mode: '0700'
- name: Add required gpg-agent configuration
lineinfile:
path: /root/.gnupg/gpg-agent
regexp: '^allow-loopback-pinentry'
line: 'allow-loopback-pinentry'
state: present
create: yes
owner: root
group: root
mode: '0400'

Loading…
Cancel
Save