nix/module/common/Git.nix

{ secret, ... }: {
	programs.git = {
		enable = true;
		config = {
			credential.helper          = "store";
			init.defaultBranch         = "main";
			pull.rebase                = true;
			push.autoSetupRemote       = true;
			rebase.autoStash           = true;
			user.signingkey            = builtins.readFile secret.crypto.sign.key;
			gpg.ssh.allowedSignersFile = toString(secret.crypto.sign.allowed);
			gpg.format                 = secret.crypto.sign.format;
		};
	};
}