[git] Add PGP signing

nixos/modules/hardware/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
     ./nvidia
+    ./yubikey
   ];
 }

nixos/modules/hardware/yubikey/default.nix

@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.sisyphus.hardware.yubikey;
+in {
+  options.sisyphus.hardware.yubikey.enable = lib.mkEnableOption "YubiKey support";
+
+  config = lib.mkIf cfg.enable {
+    # Enable smart card reading
+    services.pcscd.enable = true;
+
+    programs.gnupg.agent = {
+      enable = true;
+      pinentryFlavor = "curses";
+    };
+  };
+}

stow/git/.config/git/config

@@ -1,10 +1,15 @@
 [user]
     name = "Tibo De Peuter"
-    email = "tibo.depeuter@gmail.com"
+    email = "tibo@depeuter.dev"
+    signingkey = "0x9B11F5243089DB5B"
 
 [color]
     ui = true
 
+[commit]
+    # Always sign commits
+    gpgsign = true
+
 [core]
     editor = "vim";
     excludesFile = "~/.config/git/ignore"