krebs types += pgp-pubkey, user.pgp.pubkey

krebs/3modules/tv/default.nix

@@ -357,7 +357,7 @@ with config.krebs.lib;
     };
     tv = {
       mail = "tv@nomic.retiolum";
-      pgp.pubkey = ''
+      pgp.pubkeys.default = ''
         -----BEGIN PGP PUBLIC KEY BLOCK-----
         mQINBFbJ/B0BEADZx8l5gRurzhEHcc3PbBepdZqDJQZ2cGHixi8VEk9iN25qJO5y
         HB0q5sQRsh7oNCbzKp6qRhaG9kXmEda+Uu+qbHWxE32QcT76+W8npH73qthaFwC/

krebs/4lib/types.nix

@@ -165,6 +165,16 @@ types // rec {
         type = username;
         default = config._module.args.name;
       };
+      pgp.pubkeys = mkOption {
+        type = attrsOf pgp-pubkey;
+        default = {};
+        description = ''
+          Set of user's PGP public keys.
+
+          Modules supporting PGP may use well-known key names to define option
+          defaults, e.g. using `getAttrDef well-known-name pubkeys`.
+        '';
+      };
       pubkey = mkOption {
         type = nullOr ssh-pubkey;
         default = null;
@@ -180,6 +190,9 @@ types // rec {
   addr = str;
   addr4 = str;
   addr6 = str;
+
+  pgp-pubkey = str;
+
   ssh-pubkey = str;
   ssh-privkey = submodule {
     options = {