can sign commits now

homeManagerModules/programs/git.nix

@@ -20,12 +20,23 @@ in
       example = true;
       description = "Generate my job configuration";
     };
+    signing = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Sign all commits";
+    };
   };
   config = lib.mkIf cfg.enable {
     programs.git = {
       enable = true;
       userName = "Jakub Kropáček";
       userEmail = "kropikuba@gmail.com";
+      signing = lib.mkIf cfg.signing {
+        format = "openpgp";
+        key = "4EC6A2C45D75FC86";
+        signByDefault = true;
+      };
       includes =
         if cfg.work-config then
           let
@@ -33,6 +44,8 @@ in
               user = {
                 email = "jakub.kropacek@olc.cz";
                 name = "Jakub Kropáček";
+
+                signingkey = lib.optionalString cfg.signing "E1464E538D595102";
               };
             };
           in

hosts/lenar/home.nix

@@ -10,6 +10,7 @@
     };
     programs.git = {
       work-config = true;
+      signing = true;
     };
   };
 }