1 files changed, 49 insertions, 0 deletions
diff --git a/modules/security/ssh/git.nix b/modules/security/ssh/git.nix
new file mode 100644
index 0000000..9683629
--- /dev/null
+++ b/modules/security/ssh/git.nix
@@ -0,0 +1,49 @@
+{ config, lib, ... }:
+
+let
+  hosts = [
+    {
+      domain = "github.com";
+      identityName = "github";
+    }
+    {
+      domain = "gitlab.com";
+      identityName = "gitlab";
+    }
+    {
+      domain = "bitbucket.org";
+      identityName = "bitbucket";
+    }
+    {
+      domain = "codeberg.org";
+      identityName = "codeberg";
+    }
+    {
+      domain = "git.sr.ht";
+      identityName = "sourcehut";
+    }
+  ];
+
+  mkGitHost =
+    { domain, identityName }:
+    lib.nameValuePair domain {
+      hostname = domain;
+      user = "git";
+      identityFile = "${config.home.homeDirectory}/.local/share/ssh/git/${identityName}";
+    };
+
+  mkKeyFile =
+    { identityName, ... }:
+    lib.nameValuePair identityName {
+      enable = true;
+      text = "";
+      force = false;
+    };
+in
+{
+  config = lib.mkIf (config.programs.ssh.enable && config.programs.git.useSSH) {
+    home.file = builtins.listToAttrs (map mkKeyFile hosts);
+
+    programs.ssh.settings = builtins.listToAttrs (map mkGitHost hosts);
+  };
+}