From 1d5e96acf89a4bec7bd52c4917bd968301381713 Mon Sep 17 00:00:00 2001
From: Christopher James Hayward <chris@chrishayward.xyz>
Date: Fri, 14 May 2021 16:43:42 -0400
Subject: [PATCH] encryption -> (passwords, pinentry)

---
 README.org             |   2 +-
 docs/tasks.org.gpg     | Bin 3113 -> 3139 bytes
 init.el                |   2 +-
 modules/encryption.org | 108 -----------------------------------------
 modules/passwords.org  |  47 ++++++++++++++++++
 modules/pinentry.org   |  69 ++++++++++++++++++++++++++
 6 files changed, 118 insertions(+), 110 deletions(-)
 delete mode 100644 modules/encryption.org
 create mode 100644 modules/passwords.org
 create mode 100644 modules/pinentry.org

diff --git a/README.org b/README.org
index 5c475ff..20abef1 100644
--- a/README.org
+++ b/README.org
@@ -33,7 +33,7 @@ All of the options available for configuration are defined here. They may be ove
     feeds
     media
     terminal
-    encryption 
+    passwords pinentry 
     desktop
     writing 
     presentations
diff --git a/docs/tasks.org.gpg b/docs/tasks.org.gpg
index 84eef42a90a33fa80b995fe2f6e265d9e5a29fbc..0131d75f12e76c91981cc65852c939025daaf9ad 100644
GIT binary patch
literal 3139
zcmV-J47~G&0t^G>9JMNFPA5765C2Mjn6r&HzH`jS=9uPviHmsByQQj}aGvAw1U#84
zR(=#ZZVECY<Y#@@01gMTA5@rVDz(=Jpu2{tkIzD(5fnFZJSs_D+r0EdPH4af*GGa7
zyHK%SFM@NCkG)%2`=TL;#po*1kyur$3g{tnge6S53o>#t+#b&{RI>ZV1=i3obfs}D
zHIBM2L&>W}1XIhVs<69p-#0|Q$`ZlMKpjWp7*RZgp&_xmY?mm5`<2K(Y&8lgt7tSm
zeDIW9Wp@8_uPJFhLd2WnAk6#fjnfe3P!)c5xU8FREyG2b3n1*_4)j)<K+@!QS}}Z_
zLDrE+<7CHD+$3sYW`<qbvOFklJdrWMPpyaWW63vfXl?JR4Ui{_+*-M(q<_5SPJ*?x
zX<@nqiUa?0Fe+M55V%I>2KSwil|PhMahYB>PQ}Bmj9Q($?&$=uHVWdlzH%TEtvjUY
zQI1xxM#+BoSi%c4eO)d%qycLxKq;5s^t?*YZD9p~{LQ^?t*-j*_v?OQEV}gZygLT=
zFEkI-U@$du;*EVf48ES{bsua+ye%2A&{*E4*H9#`tA6jN3fYW4^@Ob)x|@cyxDA|O
z?BqTHA?JBMtM_~$>wG8vzbkx9(A;T%pNm<~8=CYi`f!)eZGAzDWI}NJif%5zq%sK)
z>6G;^IS9-aFhiI%Du&YQ0n3pnXeW5X5h#JXon+IZb0wF}%CRr_r)y80hWq760eMB+
zUy6wb-RCf5LyBy9obrA@uCVn^{ZJo@G>W+|NKEVorPiqE`qdD7oWb<`81X-=*0eSp
zA$ElCXnNIpP!R}YC284Ksvk~d^o+hdqT{f|HbWqk%kkA~XWbc<db7a?RhS`roO+h_
zY%-5Qv5r&9C4rlkKH+xBVjd47Cb7JwHb&o&DXjFp5*6gt+J%Z1((ep_y+Bwux7T=S
zvw38+HAWBd9KrhJiv31NqQ}04@*)Kc<4DMaghQER>1Y*~jO5C;D{I2@JYn6YJLJ^!
z)WMgfJwkdW<{uOJ;)77;WARzdXoER`S2U&8AbVu~{vfar@Y&E5OfmZ;$L45dp)Yd;
z?TmYLyuZ<S*^-S{7#@tJU8@AT=@20HW>oIJOlxrUhOG_JMk4v8!MQ25vEKb~!qSti
zt(xj4q{XYwR^Q;NA+O$B=6_Unq9QTDnO!dpQ!{${ns@nk?>3r_CzT~;M&BWT-K;{p
zBG^qWc0L_fVF-Kont!NIvGX{T0@Y!gzd!16I=znn&mj1z0@chDJ{F^xTg5Z>2(tqB
zfO*q6Rj};6HeyAR=ts^t>=D8#1*xGIpVEo`QfHCB->T`q-|=PsC?u?RJ@t&y;7PXe
zACW&B`4Mie1=JX2D)CsJY|dxu``MZ-GIxlB(=BzewhUZ?o?Ze^%u~Sa5^G!~IRLM#
z{)JX`G#A7fVk#l2@I9}x*W88-8vzV(fKEl;$o#c$tIlpLld5i1LI+S%!8<=L%cyvU
zMn@xPBVifu=+O(@%5}Y~fgovt-Gk4Bhdr3C$!ISos2lxzNjIadgtHzG@9Y|F@$WRE
zr@1+9XUycEz0zNhkh{gNWvgE3ng0r7$|E}dxJZuslwLTdjtDt|uEN^}U9uZKEy|lB
zv_H|r9IR+z$yJeNJy@ycU@he7>yj<h3C8-iu9w)&>VdoEYk=XNHv9~`HrLbhgpK@{
z0_-e}X)MEjsbsL%@}~f@H5A@gGJB>3JL@a(lk}kTobVRsgMei<zj^@E9253y=k38n
z3+DlzHM!+r<Ooo#bnAOl{b;mJo@cFJbx4wjIYX&SnwWCuGVh3Eaj&p%i99UZ315Jw
zd;JfiLFyngDxt4$PYF`;LMWoM)r~hku_<tTm89e_E7ZwfKMOVZNM}>F=JlCxYhcX9
z*l4<ryG>j@d^_?cs@=d2@`{PWvJ0XYfpIk^5QvAVC1rVh2y>ZY`}M^`jRMKBxVApZ
z54pzp^cQ74+5Uh-xcMDkt(!s$SRg|9PE1bF7Anvc`Y7Ttt;t#lpmWD5-bC=LMJlPA
zpwK!~(Y)R|Bi(gx1RbmT3g+{t>evJ>u1#FPeM$t?8Us+@Vv+ETQ&`cbW0>g)qw8+i
zEKSjoq-Y+gmZ93d$hhyTnIH&AINtV_0035MMd`X69~IB(e>KZP0b{^s&?x>Hf4?0v
zETOn+9UCzsRQi=!ZT8dcf8k8lkXyL8v<z^4X{rZOE!0FNc$z8(8kH=`(ap`UK@y;q
zqcq?s0cmr9arzYG8fGLA42&47N@dyOE*~p%tc3@T?g|749cD8zVSbru0}U$trRJ?q
zi(g#-zs|#f)xN{SuyF(jfs$<O7E4XnKU`>7<}Slb_}?I!=}eU5%ZLmnHk)*f#J~4d
zlS0cO3xUw3SB(QnGvz&4|3t4Tu^>G9aTZ5Hh#Qm3xS3K{Y?@8nh@);7mM(j-k;(|Z
zBWKrnHCTYKjV6u8o%|weVM{x;B87w*(MSc~$iwzEikZ4Wi;UHSc7WtZn7lc-E@I7v
zdWicZ?CauIn7(sRWy=^vHJMp8Yf!1H1bs^)M6yUTo`KQE%y!G0Vds<div!F&>Pr))
zWxK8gx!d1JmaSMd-Nt%AN)*XUM2;JZd@nPJwW*i3goO$LnR*wsXoY!{Si$Pt2~CSs
z89jD7%wa!55@r6`_wA=vBpG_Pd=j+%vs`-NAX%bO88_)zj<IR>YQaL*0<*r|6J_Ej
z%nA4*g?1{M1I`+cymD3<c^yCiHk7xATF&1-J!4?h@kjj?*>ew1)^k@ZA_&+ZX{|0T
zCu%gg9APicMh$(BZ4Uq?-2L?@70FDavCLKCU3$r4$#mujm;Q2$>ym}v$9w-34CNW4
zcBTW}7e!sMG6<waM}~`U13+$h4d$5OI29V67Ua3#vYM&;5J+A_=d&`0jVh=1^Ma{<
zxtjtRW`1p??;4r6FZxWIu!W5KiF7=HWW4MII0bg(8UTA6VgE<o+P^}J*4<ZcwdAei
z2WBjx<R;n8AZ?oHQu8AZZuuT23NtJipT6&ZLlG-JW<c0%&UQuKbzeIPXZj?ke(Dpb
z5?<+r;vhjbD4UFzTl$Dmb+?tjcn<Q(@C~|E#3|J|B!Uba<Dat>Qu2M-O`(~BzHcAV
zJ<78cD|Vq$HwllZxXW-I^7{Nb);n^*Yi+esN%t#0;d2A1Uqb3UuAO=V<qvj9=6uQk
zGvf-RbpI0%C3Pkv^M6lXdaESr6*5}`J~(G-=hTJDkowjm-!gw^-fyT^fPJ&HwHW6}
zKB`&qt(+|Q1=rPWEE)>;J2JM|M4`UNh2CwREd<gx!$xC+G~Sm&faaCt`ityeOQ>~v
z+ff_BWa?=O!DE=^0Xl>>XMWk&c`Ef=OVKz0-F0V4%h_)B>4IlV@1FnkaY+3=5IHkL
zQbgYTua~G73pCC4gtjA=84-z}9_?8c3nwn)GWG(Wo4-l*uFVNb85PIYASXp+<tg1E
zWn@0<&kxZ;;)P|Im6{bSc8q6LNlFm}V=-<#P5$(}fhKi=dnZt5XvcApg$O;~^Gsu!
z76R-Hj`wIk$D^AEX43t-1aN+-80$Qx$XY<cD;nE@JyTIdZxdT5-jx4zcD4gn^C@@3
zQ6{_|;i@#opiN?IPQCPZT7VnSJTJj?Wh$9?j;4ptPiNa<+fqiExkS%sYAcWuWpB9J
z4PL{3l3F)c`F%hB$%z~zrLG7clBmgyJj|QXYkOYJk4fD`@w4irIije3qrc?o#je6%
z^LkZXn1EfpTt({ipZzywvY++0&8{`whKOj(G#XE@ehcOzzE8(d#JZKS?f3nvOIna0
zssX+Dq1vT=BbY~@J8RLY3zIy$6wC5HRl2X6vbTcdDv(oW`jGq&7bYCXI#U)hAPgh`
zC^2a*?lRV3_pb52fgK)&H}b%IhJpG@VvuD>5DW8~9HW~23pOaWdUf;%(P7uCiu}p2
zUpFzwKY@T@dZkx4CTP?j4at4>;14@-92&om$4#Ux-YH82J$H%td*%}H&hKbXMY#1S
zB&_8q)a<?^>5#(1#NRxzbc$86C2vH;+%n33k}ylAe?=gqNJ~9)k*ms4sCR&qB8#PD
du7_vEN5R`J`8<C(nsUB<#Wdi@4avNoI`#)S8<zk8

literal 3113
zcmV+^4A%370t^G>9JMNFPA5765C4C+Z~BeDbwpBk)FcAQxa<<-W0x{Ndi0=Tw}`Dp
z;qM35nwwTu+`N<IUSu99v}mGfDgbLeTRfXd)nUQOCR#dp@+KZ?@rk>(A|&e=DN}+>
z0=!b%GaVrV`RVLYOCFoGx)Qm98I{0%gEnDcGIsX;o~TmKcpQ}H0Ln-1JXWM3tDU~j
z2hsa9<LLt;zy7(+=9}WQVJT71OlGNe^t~ihUdishaQ2U=u!^s|qd%?`$!A|m$N_OQ
z$t2V>MdHdaQx)y>KR{whj$P7UW(%(^-%((mYU5y5&DUg8d2k>x{@c8ZA1EuN7SgxB
z0Gz_bm()Y@NX!2@f~KjFPS6nEgGt?%6qiAAPe%yBaeGFMYf^xENNec>Uh%}ut{%kZ
zE=J%RwQp!B=>@`C_HU?+t4~#*J%*lH3YlJvgpJbLywD4v^c0G~raCRnIB{MwATM_7
zLCgGz5}6KLC?w|*k}k<TSJJF3adk+>Y#T?S@$`sr!jWV&^#0?<e7OJ7h3i6Joj)lO
zc{dZdg>rnDNSo0=OOY^>%{$VG7k)M1(siyluJ)OAy>p~fy#key8ng@cPR`ZTr5uJH
zfIs{~uo6Q-1l+5H3f(7Rs?u&*D6)KS#X1#|?Ga*R^ZIGs0}Q*JuvyZNo*0!8f9fTE
zyLT|I7?!V?3tLQO{2kKk0d17%OzkNOVF~mu7ETzH9k`5DTm+M3b}BcfQI89Ov>}R`
zC|42tV{YK1yl?zAGK(dE<e+Bydg{oxl3Bi!b1O(LhChadqIRcuVOREeZ_N<xq+*kq
z6auK%|9!<KL&XlN$!BLjz6igioOEQKb?F&>0?>?2mL>W;`rcKc<HAXtW5%!zS9~uo
zMId<1EBDd;JW~jQzxJH05z&-nY=klSkimnIj1pBNcG%k2;7x6R)fRr(sH-U(24g{t
zX}gIEjz<<H1iV8ieoye}#4oz+4zPHLep3xd9MT5ELb#J#g;=2($B!p_+A&F-=s*3{
z3pi9#9iVh}Ur{QE_0bgZxEcCW!(t+>0(C1Q7@=mNfM4?znM)^e;?7|XF3jO9t&L^j
zIS9Eap6oq(#la%?R?z*pPr5;ZuI#O*&%3RNk-FtTL-dQgtyEzEUoX3CvsWH=d)#FE
zdMM|ph*X$#D_(*N1U%nc_MY!6Z!p|bR+B;N^?3ji4Q*fT7f?=`sA%LPR<f?y%9H3~
z5J3sA#IIwXti}AE<vtv8?PX%uFC4#fyhUpgK2zrj;;zGLknO`OZpOi8J9!sSnJtq<
z=@p#=X_$hswrl~HN@ADxV_L&6xNBulW1d11YZz5A0wjMBcjE$M^sO<pQ+r>^A63og
zadB3u&V6!Lo{p#g@`fjL3;cj-sBnU>j-w-e$n5S?-N0_ZMEWcM<Lc|MT=uRFS2IpF
z7leye_^qp~!j2@Ec}oqTQ^{ktK>^GC-!`0{puTZWmH@kFC}8kl-C7%ftYwy0aG9&6
z250FvlgSmQ5yc_zQjbsfGXXe%qT-mCn>-fv5RwYyppGfMYX<WvkN;A0u#W`5mY4vd
z{g!KUBl~=YU#y0B0{l`T+?gN)l<n7OPGn#xRg0N+-tjnNVAI$cBtjzBi8!HqJHTUK
z$|%d=&Xq?la;{X#M!+{@54zAFTffZ({StQ9(c7||vn$)BD`_K>gm6*{1JW=Ge_dX3
z<1#6s?*?XgO^p@n`DElGSf>0<!=?x76sXu%{xaXt7zhZ=-~m=8#Bgjt_OTnaI#kZ#
zRKsF2LoH7KrBy7&1`QJ)fg7BMa+2hAlR)bV3)Cy>WtgQ|i3jSV0qY*`*qcq)javv@
z$-<6Z^<~3EG488~GAFVcFKvmvqi@Bc;^xVr!G;SDi<@KPa81!3CRrZ*Wf_Rtx7_|C
z&#VfJ#M_?^-p{Q%W5sU{G6u}9wxY+e0O*Y^(8R*6;!@koPA0^86JQa#Fk0rs;@%>f
zq9!Y!*ltxA9%B#|nIIN69>q5Exd0Jo6$k|E?OquFdYfK%q5iiSxVtfwKJpwZZUGBb
z?}vm2G9I}|HgR~Ud?SYL#U91x1Y&3hI*mVho*Y}Nc5t{9TQB2qHaFzafA!^M3#gq0
zo!?=lY28_JmTEj@4qVixIG~&c18+S?4-gwNH9b3@z-+~gY13E)&`$aiH5?P~EOR7n
z_d)!3*`3s30dUHFeb12Bfmfg5*sn25J}wJr^kCCI_(%X5Qq(pAFX+mU2c)x;eDT}k
zHEH@)djWA|+NvuExYr`%=sR=?7*RKP81@IxH(ET{RuoHXgHX<<!~m~@%d;ev&e;t$
z8zRpoQ?>aM)>VG7=p&sMndANbvdot9)igXG^q4qqToJvPw7??sXUS>eH~cZVGQZ@!
zLlCjtxm1#`7@c*Y%z-Ta^LmS!+l8`6X9c_C$WTv{FyiddiF}~C*~i-)+a%0#AwPW|
zAta+J9bQM@l+6)NWcj4Q1e|=HnOVLNDS&=QeV64w_9V$2I=dGhD7?Sz+O1xtFfbhZ
zzA)=AjvP#g%@D8%^$AY&4wI5zRO^8M)HAUpgxq|sc0!-4<xGKqT&~q)Cg1MyMg>6=
z-wuEg#$+R(U}$q7V6Q?_6@6ts;HRL8Y662a!^mrzCs2-SHXYbbz$ugg8E(-R5|^a8
zHR#y!KeOB`5B{-_u*whcCu>a*ny44v)Q183PPUqB0!0!-&@U;mg6}-l>T0tJmb?F{
z1hoQfOK$6fi=;9--zs6mJ+mJ1CaV()#m3-T90%f+tB#Yev=5~@-gnRm?`6;!8hCbM
znJd&@we6)I-ZmZl%Wel09hi8%P}U0q1m3oE{lQL&6TqdC#D;m3t<u1fWsuW_`;C~k
zpIbFZNv4ZY%i{k91JLFF50f}w*O#r1$Zb}I;SHb@(NHkg!WPVt2rv=>cE4z(cSZyj
z3jd7mw#7+zbv$t-jG3+n2f5J#C9bUyD(2nU5P)!T{xu${4+ntqua<b024HH)J|g|z
zaQqy`EsvEzfcDjLi=3@?qW+f1pvOSgv0;(nADx-?GDwA5z@w*~z7`WIm*Tt#@b40^
zPTFLKN8ez@flh(&Rp-4#9-vDbBgS=asTt7iy(eh<_hOECjra!LJq7;v5u-7G%5&{U
zh^J>Sc_&19gO<~Zv3`imtv9Zrz%t60K-dSCSXZB}GS*>)5AlDmD@RgtTG_8qScakJ
zomV%7OquSr`dBhj8JLU1+0+{PByV8~%^a1=s<jo2jJ*3r^2E{Obm6%s`W4bGY=1gI
z<3ZE|h)=^_BNZA0L7{&_tDd_4oIR4u<Qv)GEGr^U&iDNLV)A5?#4b#A0om60;Z4`!
zd5pKkBxGe(iO7-c7d<B9F)FK;1SOEb4M+RQ3m52aKBlZe>4{(p!E+G4KTDxr{d8mv
zT|-k{mJXv@6%zyw?=M6rJk*6=S^`LyrcI(>7+X7gK2EE)UVO$nm$KCv3LmbwO3REs
z))CJ}8U@w-tCb)&___^%NFrAhh@Z7!gcff5-N1dBuQ*RrYV{9>5Y$G*_b+Jn?HR<3
z*jiwCS{NIDKw*FLe+L*NZ1MpXaxHUrgKTz;_%o8(La9E&bW`M&G%+*QlM?Vv@MjSJ
zubi#dw0ZyTZ_$HVvVoUx!_t2^0i&!Z7K4=_3vf(vKe^T5ElowChWgQ`&Eg0=?BP&Y
z@r-wC^CE9p`KXc(1}ixsLY381xF<xR3dMV3|26>p7|H+)KKd~R--EqZdNNN@3)qT@
zd|D@|T(_sY<)eybafp<$Q~*7$k;dJTn>@~ijZnEXxkmr4nZr6$X1YH)5Q=NqCK_38
zYHCh6@Yd$O_t??N%EjK25MwKh>9wycpp>$?a4a$9365AK#;(UjC@@bI{3`*|Ee!xn
zTfTomnq(?=KtcL04f{b*nmWf*1yXF35f?jV24iR9<B-Hj4+!fHTAQ~1Y<OBfG5ytw
zss*DClqXgF0$6)umOEU)zp#_<ritbP=qepYk!x9R(NoQt>}@Rs0fnfu+(e55|0yQ&
zrp(Yke$L8h^~J(sJE|KO@Ug@Or=2E%<RM9tSQaEZng^N)ym9uKy22f<@UYMg=jw}z
DJwEbQ

diff --git a/init.el b/init.el
index 2bf1a7d..6753bbf 100644
--- a/init.el
+++ b/init.el
@@ -11,7 +11,7 @@
     feeds
     media
     terminal
-    encryption 
+    passwords pinentry 
     desktop
     writing 
     presentations
diff --git a/modules/encryption.org b/modules/encryption.org
deleted file mode 100644
index 1669e0d..0000000
--- a/modules/encryption.org
+++ /dev/null
@@ -1,108 +0,0 @@
-#+TITLE: Encryption
-#+AUTHOR: Christopher James Hayward
-#+EMAIL: chris@chrishayward.xyz
-
-#+PROPERTY: header-args:emacs-lisp :tangle encryption.el :comments org
-#+PROPERTY: header-args:shell      :tangle no
-#+PROPERTY: header-args            :results silent :eval no-export :comments org
-
-#+OPTIONS: num:nil toc:nil todo:nil tasks:nil tags:nil
-#+OPTIONS: skip:nil author:nil email:nil creator:nil timestamp:nil
-
-My source files encrypted with symmetric key encryption via *GPG*[fn:1]. This enables my workflow of storing my personal notes anywhere, including checked in to a public source repository. Emacs can cache the *GPG*[fn:1] password if you trust your session. *Pinentry*[fn:2] handled within Emacs to remain compatible without the [[file:desktop.org][Desktop]] module.
-
-* Configuring the gpg-agent
-:PROPERTIES:
-:header-args: :tangle ../config/gpg-agent.conf
-:END:
-
-When the *gpg-agent*[fn:1] loads it will read the configuration at ~~/.gnupg/gpg-agent.conf~. Override the default settings to allow Emacs to function as the *Pinentry*[fn:2] application.
-
-#+begin_src conf
-allow-emacs-pinentry
-allow-loopback-pinentry
-#+end_src
-
-** Restarting the gpg-agent
-
-You may need to restart the *gpg-agent*[fn:1] to load the configuration without rebooting.
-
-#+begin_src shell
-gpgconf --reload gpg-agent
-#+end_src
-
-** Creating a symbolic link
-
-Create the symbolic link to the configuration file 
-
-#+begin_src emacs-lisp
-(dotfiles/symlink "~/.emacs.d/config/gpg-agent.conf"
-                  "~/.gnupg/gpg-agent.conf")
-#+end_src
-
-* Setting up pinentry in Emacs
-
-With the *Pinentry*[fn:2] package for Emacs prompts will now appear in the minibuffer. Increase the minimum prime bit size to increase performance during symmetric encryption.
-
-#+begin_src emacs-lisp
-(use-package pinentry
-  :custom (epa-file-select-keys 2)
-          (gnutls-min-prime-bits 4096)
-          (epa-pinentry-mode 'loopback)
-          (epa-file-encrypt-to dotfiles/public-key)
-          (epa-file-cache-passphrase-for-symmetric-encryption t)
-  :config (pinentry-start))
-#+end_src
-
-** Including *.gpg files
-
-Override ~org-agenda-file-regexp~ to include =.org.gpg= files.
-
-#+begin_src emacs-lisp
-(unless (string-match-p "\\.gpg" org-agenda-file-regexp)
-  (setq org-agenda-file-regexp
-    (replace-regexp-in-string "\\\\\\.org" "\\\\.org\\\\(\\\\.gpg\\\\)?"
-      org-agenda-file-regexp)))
-#+end_src
-
-** Encrypting roam files
-
-Irrelevant without the [[file:writing.org][Writing]] module, encrypt new files from capture templates.
-
-#+begin_src emacs-lisp
-(with-eval-after-load 'org-roam
-  (setq org-roam-encrypt-files t))
-#+end_src
-
-* Managing passwords
-
-*Pass*[fn:3] makes managing passwords easy, encrypring them in a file structure and providing easy commands for generating, modify, and copying passwords. *Password-store.el*[fn:4] provides a wrapper for the functionality within Emacs.
-
-#+begin_src emacs-lisp
-(use-package password-store
-  :custom (password-store-dir dotfiles/passwords))
-#+end_src
-
-Configure keybindings behind =SPC p=.
-
-+ Copy with =p=
-+ Rename with =r=
-+ Generate with =g=
-
-#+begin_src emacs-lisp
-(dotfiles/leader
-  "p" '(:ignore t :which-key "Passwords")
-  "pp" '(password-store-copy :which-key "Copy")
-  "pr" '(password-store-rename :which-key "Rename")
-  "pg" '(password-store-generate :which-key "Generate"))
-#+end_src
-
-* Footnotes
-
-[fn:1] https://gnupg.org
-
-[fn:2] https://elpa.gnu.org/packages/pinentry.html
-
-[fn:3] https://passwordstore.org
-
-[fn:4] https://git.zx2c4.com/password-store/tree/contrib/emacs
diff --git a/modules/passwords.org b/modules/passwords.org
new file mode 100644
index 0000000..a5a4b80
--- /dev/null
+++ b/modules/passwords.org
@@ -0,0 +1,47 @@
+#+TITLE: Passwords
+#+AUTHOR: Christopher James Hayward
+#+EMAIL: chris@chrishayward.xyz
+
+#+PROPERTY: header-args:emacs-lisp :tangle passwords.el :comments org
+#+PROPERTY: header-args:shell      :tangle no
+#+PROPERTY: header-args            :results silent :eval no-export :comments org
+
+#+OPTIONS: num:nil toc:nil todo:nil tasks:nil tags:nil
+#+OPTIONS: skip:nil author:nil email:nil creator:nil timestamp:nil
+
+Password management inside of Emacs.
+
+* Setup
+
+Install ~pass~ on the system.
+
+#+begin_src shell
+RUN apt install pass
+#+end_src
+
+* Config
+
+Encrypted passwords are stored inside files, in a file structure providing easy commands for generating, modifying, and copying passwords. ~password-store.el~ provides a wrapper for the functionality within Emacs.
+
+#+begin_src emacs-lisp
+(use-package password-store
+  :custom (password-store-dir dotfiles/passwords))
+#+end_src
+
+* Shortcuts
+
+Configure keybindings behind =SPC p=:
+
++ Copy with =p=
++ Rename with =r=
++ Generate with =g=
+
+#+begin_src emacs-lisp
+(dotfiles/leader
+  "p" '(:ignore t :which-key "Passwords")
+  "pp" '(password-store-copy :which-key "Copy")
+  "pr" '(password-store-rename :which-key "Rename")
+  "pg" '(password-store-generate :which-key "Generate"))
+#+end_src
+
+* Footnotes
diff --git a/modules/pinentry.org b/modules/pinentry.org
new file mode 100644
index 0000000..b3bd7dd
--- /dev/null
+++ b/modules/pinentry.org
@@ -0,0 +1,69 @@
+#+TITLE: Pinentry
+#+AUTHOR: Christopher James Hayward
+#+EMAIL: chris@chrishayward.xyz
+
+#+PROPERTY: header-args:emacs-lisp :tangle pinentry.el :comments org
+#+PROPERTY: header-args:shell      :tangle no
+#+PROPERTY: header-args            :results silent :eval no-export :comments org
+
+#+OPTIONS: num:nil toc:nil todo:nil tasks:nil tags:nil
+#+OPTIONS: skip:nil author:nil email:nil creator:nil timestamp:nil
+
+Handle GPG pinentry within Emacs.
+
+* Setup
+:PROPERTIES:
+:header-args: :tangle ../config/gpg-agent.conf
+:END:
+
+When the ~gpg-agent~ loads it will read the configuration at =~/.gnupg/gpg-agent.conf=. Override the default settings to allow Emacs to function as the Pinentry application.
+
+#+begin_src conf
+allow-emacs-pinentry
+allow-loopback-pinentry
+#+end_src
+
+You may need to restart the ~gpg-agent~ to load the configuration without rebooting.
+
+#+begin_src shell :tangle nil
+gpgconf --reload gpg-agent
+#+end_src
+
+* Config
+
+Create the symbolic link to the configuration file.
+
+#+begin_src emacs-lisp
+(dotfiles/symlink "~/.emacs.d/config/gpg-agent.conf"
+                  "~/.gnupg/gpg-agent.conf")
+#+end_src
+
+With the ~pinentry~ package for Emacs prompts will now appear in the minibuffer. Increase the minimum prime bit size to increase performance during symmetric encryption.
+
+#+begin_src emacs-lisp
+(use-package pinentry
+  :custom (epa-file-select-keys 2)
+          (gnutls-min-prime-bits 4096)
+          (epa-pinentry-mode 'loopback)
+          (epa-file-encrypt-to dotfiles/public-key)
+          (epa-file-cache-passphrase-for-symmetric-encryption t)
+  :config (pinentry-start))
+#+end_src
+
+Override ~org-agenda-file-regexp~ to include =.org.gpg= files.
+
+#+begin_src emacs-lisp
+(unless (string-match-p "\\.gpg" org-agenda-file-regexp)
+  (setq org-agenda-file-regexp
+    (replace-regexp-in-string "\\\\\\.org" "\\\\.org\\\\(\\\\.gpg\\\\)?"
+      org-agenda-file-regexp)))
+#+end_src
+
+Encrypt new files from capture templates.
+
+#+begin_src emacs-lisp
+(with-eval-after-load 'org-roam
+  (setq org-roam-encrypt-files t))
+#+end_src
+
+* Footnotes