krebs types += pgp-pubkey, user.pgp.pubkey

1 files changed, 13 insertions, 0 deletions

diff --git a/krebs/4lib/types.nix b/krebs/4lib/types.nix
index ed6ae9e4f..112984445 100644
--- a/krebs/4lib/types.nix
+++ b/krebs/4lib/types.nix
@@ -165,6 +165,16 @@ types // rec {
         type = username;
         default = config._module.args.name;
       };
+      pgp.pubkeys = mkOption {
+        type = attrsOf pgp-pubkey;
+        default = {};
+        description = ''
+          Set of user's PGP public keys.
+
+          Modules supporting PGP may use well-known key names to define option
+          defaults, e.g. using `getAttrDef well-known-name pubkeys`.
+        '';
+      };
       pubkey = mkOption {
         type = nullOr ssh-pubkey;
         default = null;
@@ -180,6 +190,9 @@ types // rec {
   addr = str;
   addr4 = str;
   addr6 = str;
+
+  pgp-pubkey = str;
+
   ssh-pubkey = str;
   ssh-privkey = submodule {
     options = {