{ config, pkgs, ... }:

{
  programs = {
    gpg.enable = true;
    password-store = {
      enable = true;
      package = pkgs.pass.withExtensions (exts: with exts; [ pass-otp pass-update pass-audit pass-import ]);
      settings.PASSWORD_STORE_DIR = with config.home;
        "${homeDirectory}/.password-store";
    };
    git.extraConfig.credential.helper =
      "${pkgs.gitFull}/bin/git-credential-libsecret";
  };
}