From c31d21e382a0176da1a0140ca38fb3f0ae94d8ef Mon Sep 17 00:00:00 2001
From: Yorick Barbanneau <ephase@xieme-art.org>
Date: Wed, 2 Apr 2025 15:40:18 +0200
Subject: [PATCH 1/2] feat(git): add signing options

---
 modules/home-manager/cli/git/default.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/modules/home-manager/cli/git/default.nix b/modules/home-manager/cli/git/default.nix
index 07ec476..e46fba6 100644
--- a/modules/home-manager/cli/git/default.nix
+++ b/modules/home-manager/cli/git/default.nix
@@ -18,6 +18,18 @@ in
       default = "ephase@xieme-art.org";
       description = "git email";
     };
+
+    signingKey = mkOption {
+      type = types.str;
+      default = null;
+      description = "signing key fingerprint";
+    };
+
+    signByDefault = mkOption {
+      type = types.bool;
+      default = false;
+      description = "activate signing by default";
+    };
   };
   config = mkIf cfg.enable {
     programs.git = {
@@ -34,6 +46,8 @@ in
       package = pkgs.gitFull;
       userName = "${cfg.userName}";
       userEmail = "${cfg.userEmail}";
+      signing.key = "${cfg.signingKey}";
+      signing.signByDefault = cfg.signByDefault;
       aliases = {
         co = "checkout";
         fa = "fetch --all";

From 3e516304177ec2d14e52ac75294c8ac12cc23e87 Mon Sep 17 00:00:00 2001
From: Yorick Barbanneau <ephase@xieme-art.org>
Date: Wed, 2 Apr 2025 15:40:38 +0200
Subject: [PATCH 2/2] chore(work): activate signing

---
 hosts/work/home-config.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/work/home-config.nix b/hosts/work/home-config.nix
index 2ed7d11..724fc54 100644
--- a/hosts/work/home-config.nix
+++ b/hosts/work/home-config.nix
@@ -14,6 +14,8 @@
       git = {
         enable = true;
         userEmail = "ybarbanneau@sellsy.com";
+        signingKey ="6E1A834E282FBD98B48069444447A19BBEDB8DBA";
+        signByDefault = true;
       };
       neovim.enable = true;
       starship.enable = true;