{
  config,
  lib,
  pkgs,
  ...
}: {
  services.xserver.displayManager.gdm = {
    enable = true;
  };

  # unlock GPG keyring on login
  security.pam.services.gdm.enableGnomeKeyring = true;
}