{
  config,
  lib,
  pkgs,
  ...
}:
{
  programs = {
    gpg.enable = true;
    password-store = {
      enable = true;
      package = pkgs.pass-nodmenu.withExtensions (
        exts: with exts; [
          pass-update
          pass-import
        ]
      ); # pass-audit
      settings = {
        PASSWORD_STORE_DIR = "${config.home.homeDirectory}/.password-store";
        PASSWORD_STORE_ENABLE_EXTENSIONS = "true";
      };
    };
  };
  services.gpg-agent = {
    enable = true;
    pinentryPackage = lib.mkDefault pkgs.pinentry-all;
  };
}