Make gpg ssh support configurable

_machines/ares.yml

@@ -13,6 +13,7 @@ users:
   mail: hannes@hkoerber.de
   git_gpg_sign: false
   gpg_agent: true
+  gpg_agent_for_ssh: true
   gpg_keys:
     master_key: "0xB5C002530C6A2053"
   environment:

_machines/tb-hak.yml

@@ -12,6 +12,7 @@ users:
   mail: hannes.koerber@tradebyte.com
   git_gpg_sign: false
   gpg_agent: false
+  gpg_agent_for_ssh: false
   environment:
     MACHINE_HAS_NEXTCLOUD: "false"
 - name: hannes-private
@@ -20,6 +21,7 @@ users:
   mail: hannes@hkoerber.de
   git_gpg_sign: false
   gpg_agent: true
+  gpg_agent_for_ssh: true
   gpg_keys:
     master_key: "0xB5C002530C6A2053"
   environment:

dotfiles.yml

@@ -14,6 +14,7 @@ dotfiles:
     to: .gnupg/dirmngr.conf
   - from: gnupg/gpg-agent.conf
     to: .gnupg/gpg-agent.conf
+    template: true
   - from: gnupg/gpg.conf
     to: .gnupg/gpg.conf
     template: true

gnupg/gpg-agent.conf.j2

@@ -4,6 +4,8 @@ default-cache-ttl-ssh 60480000
 max-cache-ttl 34560000
 max-cache-ttl-ssh 34560000
 
+{% if user.gpg_agent_for_ssh %}
 enable-ssh-support
+{% endif %}
 
 pinentry-program /usr/bin/pinentry-qt