{ pkgs, ... }:
{
  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
    pinentryPackage = pkgs.pinentry-curses;
    enableExtraSocket = true;
    enableBrowserSocket = true;

    settings = {
      enable-ssh-support = "";
      ttyname = "$GPG_TTY";
      default-cache-ttl = 34560000; # 60
      max-cache-ttl = 34560000; # 120
      allow-loopback-pinentry = "";
    };
  };
}