Split gpg-agent config by profile

ansible/inventory/group_vars/server.yml

@@ -12,14 +12,20 @@ profile_packages:
   - dmidecode
   - dosfstools
   - gh
+  - gnupg
+  - gpg-agent
   - netcat-openbsd
   - openssh-server
   - parted
   - pciutils
+  - pinentry-curses
   - ranger
   - rsync
 
 server_dotfiles:
+  - src: .gnupg/gpg-agent.conf
+    dest: .gnupg/gpg-agent.conf
+    mode: "0600"
   - src: .gitignore_global
     dest: .gitignore_global
     mode: "0644"
@@ -42,6 +48,10 @@ server_templates:
     no_log: true
 
 server_directories:
+  - path: "{{ server_user_home }}/.gnupg"
+    owner: "{{ server_username }}"
+    group: "{{ server_user_group }}"
+    mode: "0700"
   - path: "{{ server_container_stack_dir }}"
     owner: root
     group: root