Split gpg-agent config by profile

ansible/inventory/group_vars/server.yml

@@ -12,14 +12,20 @@ profile_packages:
   - dmidecode
   - dosfstools
   - gh
+  - gnupg
+  - gpg-agent
   - netcat-openbsd
   - openssh-server
   - parted
   - pciutils
+  - pinentry-curses
   - ranger
   - rsync
 
 server_dotfiles:
+  - src: .gnupg/gpg-agent.conf
+    dest: .gnupg/gpg-agent.conf
+    mode: "0600"
   - src: .gitignore_global
     dest: .gitignore_global
     mode: "0644"
@@ -42,6 +48,10 @@ server_templates:
     no_log: true
 
 server_directories:
+  - path: "{{ server_user_home }}/.gnupg"
+    owner: "{{ server_username }}"
+    group: "{{ server_user_group }}"
+    mode: "0700"
   - path: "{{ server_container_stack_dir }}"
     owner: root
     group: root

ansible/inventory/group_vars/workstation_dev.yml

@@ -19,9 +19,6 @@ workstation_user_directories:
     mode: "0700"
 
 workstation_dotfiles:
-  - src: .gnupg/gpg-agent.conf
-    dest: .gnupg/gpg-agent.conf
-    mode: "0600"
   - src: .gitignore_global
     dest: .gitignore_global
     mode: "0644"

ansible/inventory/group_vars/workstation_dev_wsl.yml

@@ -3,6 +3,7 @@ enabled_services:
   - docker
 
 workstation_dev_wsl_packages:
+  - pinentry-curses
   - python3-pip
 workstation_dev_wsl_excluded_packages:
   - pcscd
@@ -19,3 +20,7 @@ workstation_dev_wsl_python_packages:
   - pypsrp
   - pyspnego
 workstation_wsl_systemd_enabled: true
+workstation_dev_wsl_dotfiles:
+  - src: .gnupg/gpg-agent.conf
+    dest: .gnupg/gpg-agent.conf
+    mode: "0600"

ansible/inventory/group_vars/workstation_host_linux.yml

@@ -13,6 +13,11 @@ workstation_host_linux_packages:
   - podman-compose
   - yubikey-manager
 
+workstation_host_linux_dotfiles:
+  - src: .gnupg/gpg-agent.conf
+    dest: .gnupg/gpg-agent.conf
+    mode: "0600"
+
 workstation_manage_google_chrome: true
 
 workstation_removed_snap_packages: