Manage GnuPG as well.

.bashrc

@@ -20,7 +20,6 @@ export CLOUDSDK_ACTIVE_CONFIG_NAME='shore'
 export DOCKER_BUILDKIT=1
 export EDITOR=vim
 export GITLAB_BASE_URL='https://git.shore.co.il/api/v4'
-export GNUPGHOME="$HOME/Documents/.gnupg"
 export GOPATH="$HOME/.local/golang"
 export HELM_HOME="$HOME/.helm"
 export HISTCONTROL=ignoreboth:erasedups

.gnupg/gpg.conf

+use-agent
+default-key D3B913DE36AB5565DCAC91C6A322378C61339ECD
+personal-digest-preferences SHA256
+cert-digest-algo SHA256
+default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed

Makefile

@@ -93,3 +93,9 @@ all: .aws/credentials
 	echo '[smile]' > '$@'
 	echo "aws_access_key_id = $$(ph show --field 'UserName' 'Smile/AWS CLI')" >> '$@'
 	echo "aws_secret_access_key = $$(ph show --field 'Password' 'Smile/AWS CLI')" >> '$@'
+
+all: .gnupg/trustdb.gpg
+.gnupg/trustdb.gpg: Documents/Database.kdbx
+	ph show --field 'Notes' 'GPG/D3B913DE36AB5565DCAC91C6A322378C61339ECD' | gpg --import
+	echo 'D3B913DE36AB5565DCAC91C6A322378C61339ECD:6:' | gpg --import-ownertrust
+	chmod 600 '$@'