modules/development/git/assertions.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# Validates SSH is enabled when git.useSSH is set
{ config, ... }:
{
  assertions = [
    {
      assertion = !config.development.git.signing.sign-by-default || config.development.git.enable;
      message = ''
        development.git.signing.sign-by-default is enabled but development.git.enable is not.
        Enable development.git before enabling commit signing.
      '';
    }
    {
      assertion =
        !config.development.git.signing.sign-by-default || config.development.git.signing.key != null;
      message = ''
        development.git.signing.sign-by-default is enabled but development.git.signing.key is not set.
        Set a GPG key ID before enabling commit signing by default.
      '';
    }
    {
      assertion = !config.development.git.signing.sign-by-default || config.security.gpg.enable;
      message = ''
        development.git.signing.sign-by-default is enabled but security.gpg.enable is not.
        Commit signing requires the managed GPG configuration. Please enable security.gpg.
      '';
    }
  ];
}