{...}: {
  # git user config (~/.config/git or ~/.gitconfig) is managed via stow.
  # We only install git + related tooling and enable the gpg agent.
  flake.nixosModules.git = {pkgs, ...}: {
    environment.systemPackages = with pkgs; [
      git
      git-secret
    ];
    programs.gnupg.agent = {
      enable = true;
      pinentryPackage = pkgs.pinentry-all;
    };
  };
}