From bd9cb2afff1206fc164a38180eae31a08bb2574b Mon Sep 17 00:00:00 2001
From: lightly-toasted <tooast@duck.com>
Date: Sat, 6 Dec 2025 21:46:10 +0900
Subject: [PATCH] feat: add git-crypt

- Set up git-crypt for encrypted secrets on y2q
---
 .gitattributes             |   1 +
 flake.nix                  |   2 ++
 secrets/gitcrypt/runit/env | Bin 0 -> 56 bytes
 shell.nix                  |   1 +
 4 files changed, 4 insertions(+)
 create mode 100644 .gitattributes
 create mode 100644 secrets/gitcrypt/runit/env

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..2f9a74f
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets/gitcrypt/** filter=git-crypt diff=git-crypt
diff --git a/flake.nix b/flake.nix
index ea47471..db87bd5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -87,6 +87,8 @@
               pkgs.nix
               pkgs.home-manager
               pkgs.sops
+              pkgs.git
+              pkgs.git-crypt
             ];
 
             shellHook = ''
diff --git a/secrets/gitcrypt/runit/env b/secrets/gitcrypt/runit/env
new file mode 100644
index 0000000000000000000000000000000000000000..15a44d86880dcf2bb41653f2c6fd0997aa2b8b1f
GIT binary patch
literal 56
zcmZQ@_Y83kiVO&0nA!6;{O>nC7v17RQyQfzOhdhHME>Bg)bI3Gk-OEGwryq8rkY5e
NXMVSmx*yHs0sxPt7^naM

literal 0
HcmV?d00001

diff --git a/shell.nix b/shell.nix
index e59b2b2..36dd381 100644
--- a/shell.nix
+++ b/shell.nix
@@ -6,5 +6,6 @@ pkgs.mkShell {
     home-manager
     git
     sops
+    git-crypt
   ];
 }