genebean/dots
1
0
Fork 0
mirror of https://github.com/genebean/dots.git synced 2026-05-30 23:35:22 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Move sensitive git config to private-flake, setup authorized signers

Browse source 
Co-authored-by: Claude <claude@anthropic.com>
This commit is contained in:
Gene Liverman 2026-04-09 23:49:39 -04:00
parent 59e36c1d3e
commit cf6d362d6c
Signed by: genebean
SSH key fingerprint: SHA256:ZjLMZwtU49BWDoI2hgsA0/Q6XT4+S0kcKFWW1EJBicI
20 changed files with 18 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/shared/home/general/default.nix
View file

@ -138,7 +138,6 @@ in
"*.swp"
".DS_Store"
];
includes = [ { path = "~/.gitconfig-local"; } ];
lfs.enable = true;
package = pkgs.gitFull;
settings = {
@ -152,6 +151,9 @@ in
};
gpg = {
format = "ssh";
ssh = {
allowedSignersFile = "${config.home.homeDirectory}/.config/git/allowed_signers";
};
};
merge = {
conflictStyle = "diff3";
@ -316,7 +318,6 @@ in
history.size = 1000000;
initContent = ''
[ -f ~/.private-env ] && source ~/.private-env || echo '~/.private-env is missing'
[ -f ~/.gitconfig-local ] || echo '~/.gitconfig-local is missing. Create it and set user.email'
# Start GPG agent
# Some tips from https://hedberg.io/yubikey-for-ssh/ helped simplify this: