nix/module/common/Git.nix

{ secret, ... }: {
	programs.git = {
		enable = true;
		config = {
			credential.helper    = "store";
			init.defaultBranch   = "main";
			pull.rebase          = true;
			push.autoSetupRemote = true;
			rebase.autoStash     = true;
			user.signingkey      = builtins.readFile secret.crypto.sign.key;
			gpg.format           = secret.crypto.sign.format;
		};
	};
}