nix-config/modules/shell/git.nix

{
  config,
  lib,
  pkgs,
  vars,
  ...
}: {
  home-manager.users.${vars.user} = {
    home.file.".ssh/allowed_signers".text = "* ${builtins.readFile ../../rsc/config/git/git.pub}";
    home.file.".ssh/git.pub" = {
      source = ../../rsc/config/git/git.pub;
    };

    programs.git = {
      enable = true;
      userName = "GHOSCHT";
      userEmail = "31184695+GHOSCHT@users.noreply.github.com";

      extraConfig = {
        # Sign all commits using ssh key
        commit.gpgsign = false;
        gpg.format = "ssh";
        gpg.ssh.allowedSignersFile = "~/.ssh/allowed_signers";
        user.signingkey = "~/.ssh/git.pub";
        init.defaultBranch = "main";
      };
    };
  };
}