nixos/home/auth/home.nix

{
  pkgs,
  lib,
  config,
  ...
}:
with lib;
{
  # git signing configuration
  programs.git = {
    signing = {
      signByDefault = true;
      gpgPath = "${pkgs.openssh}/bin/ssh-keygen";
      key = null;
    };

    extraConfig = {
      user.signingkey = "~/.ssh/id_ed25519.pub";
      gpg = {
        format = "ssh";
        # compiled from trusted keys in auth module
        ssh.allowedSignersFile = toString (
          pkgs.writeText "allowed_signers" (
            foldr (key: folded: folded + "koishi@514fpv.one ${key}\n") "" config.passthrough.publicKeys
          )
        );
      };
    };
  };

  programs.ssh = {
    enable = true;
    matchBlocks = {
      "edge.514fpv.io".port = 8086;
      "sf.514fpv.io".port = 8087;
    };
  };

  wayland.windowManager.sway.config.window.commands = mkIf config.passthrough.gui [
    {
      criteria.title = "Bitwarden";
      command = "floating enable";
    }
  ];
}