From 09ec08dcb258210c1000b257c25429dc3a0b6a9c Mon Sep 17 00:00:00 2001
From: lightly-toasted <tooast@duck.com>
Date: Sat, 23 Aug 2025 22:50:00 +0900
Subject: [PATCH] feat: add gemini cli

---
 home/toast/home.nix               |  1 +
 home/toast/modules/gemini-cli.nix | 30 ++++++++++++++++++++++++++++++
 secrets/secrets.yaml              |  5 +++--
 3 files changed, 34 insertions(+), 2 deletions(-)
 create mode 100644 home/toast/modules/gemini-cli.nix

diff --git a/home/toast/home.nix b/home/toast/home.nix
index a8b284a..fd29734 100644
--- a/home/toast/home.nix
+++ b/home/toast/home.nix
@@ -26,6 +26,7 @@
     ./modules/obsidian.nix
     ./modules/xdg.nix
     ./modules/sops.nix
+    ./modules/gemini-cli.nix
   ];
   
   home = {
diff --git a/home/toast/modules/gemini-cli.nix b/home/toast/modules/gemini-cli.nix
new file mode 100644
index 0000000..c071d58
--- /dev/null
+++ b/home/toast/modules/gemini-cli.nix
@@ -0,0 +1,30 @@
+{ pkgs, config, ... }:
+
+{
+  sops.secrets.github_token = { };
+  home.packages = with pkgs; [
+    gemini-cli
+  ];
+  home.file.".gemini/settings.json".text = ''
+    {
+      "selectedAuthType": "oauth-personal",
+      "mcpServers": {
+        "context7": {
+          "httpUrl": "https://mcp.context7.com/mcp"
+        },
+        "github": {
+          "command": "npx",
+          "args": [
+            "@modelcontextprotocol/server-github"
+          ],
+          "timeout": 10000,
+          "trust": false
+        }
+      },
+      "preferredEditor": "neovim"
+    }
+  '';
+  home.file.".gemini/.env".text = ''
+    GITHUB_TOKEN=$(cat ${config.sops.secrets.github_token.path})
+  '';
+}
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 4fbc80f..b975b7d 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -1,5 +1,6 @@
 tailscale:
     authkey: ENC[AES256_GCM,data:ssxd13QKzXbezZs9ewR0CRsN0T6FMzQjGyJ5czjv4lHP6ODM1hAkS728vInfgq2hwUwVzs17I0C4017MGg==,iv:r/M4WtjrQZLdqidlFNUvY9NQhDSntNka2iYOAu+RQc8=,tag:kycZLagUboZ31ryQ3exi3w==,type:str]
+github_token: ENC[AES256_GCM,data:UUe3GfG3iqi0X1m+Bp27MVV8wWKtxOowxRpEtTkf0uET316JkozrBg==,iv:j42ZkKxCBkCZU3fiyP3vELFk0a6w4uW9XB8FmDWJaiw=,tag:ApIfHqgqgwWDWoyq0+uRRQ==,type:str]
 sops:
     age:
         - recipient: age1mggj0wsszz92kfpvq7pjlf0mthkljl9usu7u98jrmyxh85q4pecs6zz4ll
@@ -11,7 +12,7 @@ sops:
             Z0crWElZcVFMVUd0VytoTHFqbkRDck0KY8nsRThk1hCA/yDNy5JJ0T6pTUwRZhYW
             j8grD6JYvauuYa+3tSIwqy2RPiKltx696n9nXy9iPnFUO0QY/rQGVg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-23T08:50:02Z"
-    mac: ENC[AES256_GCM,data:nlUuYj6F960mebfQEER+ZyUfulIRRC1Uo1U0ZvKLA/YeemIzbbS/PlVawncsYEmhl6dyQ3RsXTEEqV7dAr0Bz3Ds5TFf4zz5kvRAf++1ho8TGyjBC88qR6hEoShJsuTfjFUn6NWiYetIKbmnLsuclE2aQU+8fo54PvIx8ut8mpo=,iv:qOHR8lXg9IeSHHq5StrwVsgIC4tIOAzvcSGS6bO7MXc=,tag:tZ7PByMZAPwe10sr3YLRgw==,type:str]
+    lastmodified: "2025-08-23T13:48:07Z"
+    mac: ENC[AES256_GCM,data:pLobHx7xjLF4wKKwyF6ocrHZ9D8WVrbPMWK3vK3vIRL2D5zCzqdAC6RM/WD6QZ4ozPsMxQMVvLSQQUzIlWz9EuARXMXeL5BcABpc1qKNCmql0Pn3N4RrdWG/Ct36WU/4o8qzdOIwzbgnD4VHgpdRg81ru3gL3WbdO7CalB2N7Nw=,iv:BUEgXtmPWNB1wiMD68Ef+bHA8oXcIbaeV94LjOSG3Aw=,tag:P2rgn6r93ryk5dlM/KZYNg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2