{...}: {
  # Global git config lives in /etc/gitconfig via programs.git.config.
  # Note: a per-user ~/.gitconfig (or ~/.config/git/config) overrides these,
  # so keep identity out of the stow dotfiles to avoid shadowing this.
  flake.nixosModules.git = {pkgs, ...}: {
    programs.git = {
      enable = true;
      config = {
        user = {
          name = "ahmza";
          email = "hamza@ahmza.com";
        };
        init.defaultBranch = "main";
      };
    };

    environment.systemPackages = with pkgs; [
      git-secret
    ];

    programs.gnupg.agent = {
      enable = true;
      pinentryPackage = pkgs.pinentry-all;
    };
  };
}