diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..9f1cb3c
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,2 @@
+*.yaml diff=sopsdiffer
+
diff --git a/modules/home-manager/common/all-cli.nix b/modules/home-manager/common/all-cli.nix
index 34edb79..7b44177 100644
--- a/modules/home-manager/common/all-cli.nix
+++ b/modules/home-manager/common/all-cli.nix
@@ -97,6 +97,9 @@ in {
     git = {
       enable = true;
       diff-so-fancy.enable = true;
+      extraConfig = {
+        diff.sopsdiffer.textconv = "sops --config /dev/null --decrypt";
+      };
       ignores = [
         "*~"
         "*.swp"