nixos

commit 4bbea5d5b135a3d34deaac45bc513f4a4b655489
parent aca3044dff6fa55eb3e7f7cadc63371ac569937c
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  9 Aug 2023 20:39:28 +0200

Enable ssh signing

Diffstat:
M
home-manager/home.nix
 | 
11
+++++++++++

1 file changed, 11 insertions(+), 0 deletions(-)
diff --git a/home-manager/home.nix b/home-manager/home.nix
@@ -50,6 +50,9 @@
   # programs.neovim.enable = true;
   # home.packages = with pkgs; [ steam ];
 
+  home.file.".ssh/allowed_signers".text =
+    "* ${builtins.readFile /home/marcel/.ssh/id_ed25519.pub}";
+
   # Enable home-manager and git
   programs = {
     home-manager.enable = true;
@@ -63,6 +66,14 @@
       enable = true;
       userName = "MTRNord";
       userEmail = "support@nordgedanken.dev";
+
+      extraConfig = {
+        # Sign all commits using ssh key
+        commit.gpgsign = true;
+        gpg.format = "ssh";
+        gpg.ssh.allowedSignersFile = "~/.ssh/allowed_signers";
+        user.signingkey = "~/.ssh/id_ed25519.pub";
+      };
     };
 
     zsh = {