gpg

GPG settings.

Type: attribute set of (submodule)

Default: { }

gpg.allowedSigners

File used for SSH signature verification.

warning

This option can only be defined if format is set to ssh.

note

When null, the global git configuration value is used.

Type: null or string or absolute path

Default: null

gpg.format

Format to use for commit signing.

Type: constrained string

Valid values:

  • openpgp
  • ssh

Default: openpgp

gpg.package

The gnupg package to use.

Used for commit signing.

warning

When using ssh format, this must be changed from the default.

Type: package

Default: pkgs.gnupg

gpg.program

Binary from the package to use.

Type: string

Default: bin/${pkgs.gnupg.mainProgram}

Example: ssh-keygen

gpg.signCommits

Enable commit signature.

Type: null or boolean

Default: config.programs.git.signing.signByDefault

gpg.signTags

Enable tag signature.

Type: null or boolean

Default: config.programs.git.signing.signByDefault

gpg.signingKey

Private key to use for commit signing.

When using openpgp format, this is the identifier of the GPG key used for signing.

When using ssh format, this is the path to the SSH private key used for signing.

Type: null or string or absolute path

Default: config.programs.git.signing.key

Example: EC6624FA72B9487E

This documentation was automatically generated from the NixKraken configuration options.

Generated on: 2025-09-14