{ ... }: {
  programs.gpg = {
    enable = true;
    settings = {
      keyserver = "hkp://keys.gnupg.net";
      cert-digest-algo = "SHA256";
      no-emit-version = "";
      personal-cipher-preferences = "AES AES256 AES192 CAST5";
      personal-digest-preferences = "SHA256 SHA512 SHA384 SHA224";
      auto-key-locate = "local";
    };
  };
}