can sign commits now

flake.lock

@@ -52,11 +52,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1749526396,
-        "narHash": "sha256-UL9F76abAk87llXOrcQRjhd5OaOclUd6MIltsqcUZmo=",
+        "lastModified": 1749657191,
+        "narHash": "sha256-QLilaHuhGxiwhgceDWESj9gFcKIdEp7+9lRqNGpN8S4=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "427c96044f11a5da50faf6adaf38c9fa47e6d044",
+        "rev": "faeab32528a9360e9577ff4082de2d35c6bbe1ce",
         "type": "github"
       },
       "original": {

homeManagerModules/programs/git.nix

@@ -20,12 +20,23 @@ in
       example = true;
       description = "Generate my job configuration";
     };
+    signing = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Sign all commits";
+    };
   };
   config = lib.mkIf cfg.enable {
     programs.git = {
       enable = true;
       userName = "Jakub Kropáček";
       userEmail = "kropikuba@gmail.com";
+      signing = lib.mkIf cfg.signing {
+        format = "openpgp";
+        key = "4EC6A2C45D75FC86";
+        signByDefault = true;
+      };
       includes =
         if cfg.work-config then
           let
@@ -33,6 +44,8 @@ in
               user = {
                 email = "jakub.kropacek@olc.cz";
                 name = "Jakub Kropáček";
+
+                signingkey = lib.optionalString cfg.signing "E1464E538D595102";
               };
             };
           in

hosts/lenar/home.nix

@@ -10,6 +10,7 @@
     };
     programs.git = {
       work-config = true;
+      signing = true;
     };
   };
 }