diff --git a/home/programs/git/signing.nix b/home/programs/git/signing.nix new file mode 100644 index 0000000..58c223e --- /dev/null +++ b/home/programs/git/signing.nix @@ -0,0 +1,10 @@ +_: { + home.file.".ssh/allowed_signers".text = + "* ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIINhWby7lUUXQNKbRu9/UOrGjWDf3fvoAwGHomWv/+lL"; + programs.git.extraConfig = { + commit.gpgsign = true; + gpg.ssh.allowedSignersFile = "~/.ssh/allowed_signers"; + gpg.format = "ssh"; + user.signingkey = "~/.ssh/key.pub"; + }; +} diff --git a/hosts/laptop/home.nix b/hosts/laptop/home.nix index bbc6fef..c6ca067 100644 --- a/hosts/laptop/home.nix +++ b/hosts/laptop/home.nix @@ -10,6 +10,7 @@ ../../home/programs/shell ../../home/programs/fetch ../../home/programs/git + ../../home/programs/git/signing.nix ../../home/programs/spicetify ../../home/programs/nextcloud ../../home/programs/thunar