{
  lib,
  pkgs,
  config,
  ...
}:
{
  programs.git = {
    enable = true;
    lfs.enable = true;

    settings = {
      core = {
        excludesfile = "~/.gitignore";
      };
      user = {
        name = config.hostSpec.userFullName;
        email = config.hostSpec.email.user;
      };
      gpg = {
        format = "ssh";
      };
      "gpg \"ssh\"" = {
        program = "${lib.getExe' pkgs._1password-gui "op-ssh-sign"}";
      };
      commit = {
        gpgsign = true;
      };
      user = {
        signingKey = "~/.ssh/id_ed25519.pub";
      };
      pull = {
        rebase = true;
      };
      init = {
        defaultBranch = "main";
      };
      lfs = {
        locksverify = true;
      };
      "url \"ssh://git@github.com/\"" = {
        insteadOf = "https://github.com/";
      };
    };
  };
}