From 7835987c19f46ca91bb5ccab35aafd52124a4679 Mon Sep 17 00:00:00 2001
From: Soispha Peetz <soispha@b-peetz.de>
Date: Tue, 10 Nov 2026 16:45:50 +0100
Subject: modules/gpg: Use a better pinentry program

The curses one shows up on the latest started terminal, and has serious
issues with already started stuff on there (e.g. when trying to run over
a running nvim instance). Additionally it's just insecure, as we are
using in-band messaging, so an malicious application could draw a
similar looking prompt and get me to enter my passphrase in there.
---
 modules/by-name/gp/gpg/module.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/modules/by-name/gp/gpg/module.nix b/modules/by-name/gp/gpg/module.nix
index 9be4cada..afe3ee1b 100644
--- a/modules/by-name/gp/gpg/module.nix
+++ b/modules/by-name/gp/gpg/module.nix
@@ -102,8 +102,7 @@ in {
           maxCacheTtlSsh = 60 * 50;
 
           pinentry = {
-            package = pkgs.pinentry-curses;
-            # package = pkgs.pinentry-tty;
+            package = pkgs.pinentry-qt;
           };
 
           enableSshSupport = true;
-- 
cgit v1.3.1