gpg setup

[apatel762]

not sure if this should be done here or in the Ansible repo, but chezmoi supports copying attachments from a KeePassXC database, so I could back everything up there and copy it back out for each new machine?

https://www.chezmoi.io/reference/templates/keepassxc-functions/keepassxcAttachment/

e.g.

{{- keepassxcAttachment "/Local/GPG Key" "pubring.kbx" -}}

Don't know if it works with binary files though?

Maybe I could use an onchange script to copy the files over via the keepassxc-cli? e.g. https://github.com/twpayne/dotfiles/tree/master/home/.chezmoiscripts/linux

---

Backing up GPG: https://serverfault.com/questions/86048/how-to-backup-gpg

GPG Configuration: https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration.html

• ~~/.gnupg/gpg.conf (standard configuration file)~ already done
• ~/.gnupg/pubring.kbx (new public keyring using keybox format)
• ~/.gnupg/openpgp-revocs.d/ (revocation certificates) secret!

[apatel762]

apparently you can render entire files using chezmoi templates... and you can store the files as KeePass attachments

https://github.com/twpayne/chezmoi/discussions/2396