rot8000

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>

modules/nixos/services/base/default.nix

@@ -1,8 +1,18 @@
-{ options, config, lib, pkgs, ... }:
+{ options
+,config
+,lib
+,pkgs
+, ... }:
 
 with lib;
 with lib.metacfg;
-let cfg = config.metacfg.base;
+let
+  cfg = config.metacfg.base;
+  gitconfig = pkgs.writeText "gitconfig" ''
+    [filter "rot8000"]
+        smudge = ${pkgs.metacfg.rot8000}/bin/rot8000
+        clean = ${pkgs.metacfg.rot8000}/bin/rot8000
+  '';
 in
 {
   options.metacfg.base = with types; {
@@ -38,6 +48,7 @@ in
         delta
         efibootmgr
         git
+        git-crypt
         git-delete-merged-branches
         home-manager
         htop
@@ -137,6 +148,10 @@ in
       ];
       flake = "git+https://git.hoyer.xyz/harald/nixcfg";
     };
+    systemd.services.nixos-upgrade = {
+      path = [ pkgs.metacfg.rot8000 ];
+      environment.GIT_CONFIG_GLOBAL = toString gitconfig;
+    };
 
     virtualisation.libvirtd.enable = true;