diff --git a/modules/common/shell/git.nix b/modules/common/shell/git.nix
index 82b593b..631bade 100644
--- a/modules/common/shell/git.nix
+++ b/modules/common/shell/git.nix
@@ -38,6 +38,12 @@ in {
           push = { autoSetupRemote = "true"; };
           init = { defaultBranch = "master"; };
           rebase = { autosquash = "true"; };
+          gpg = {
+            format = "ssh";
+            ssh.allowedSignersFile = "~/.config/git/allowed-signers";
+          };
+          commit.gpgsign = true;
+          tag.gpgsign = true;
         };
         ignores = [ ".direnv/**" "result" ];
         includes = [{
@@ -52,6 +58,11 @@ in {
         [user]
             name = "${config.fullName}"
             email = "7386960+nmasur@users.noreply.github.com"
+            signingkey = ~/.ssh/id_ed25519
+      '';
+
+      xdg.configFile."git/allowed-signers".text = ''
+        7386960+nmasur@users.noreply.github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+AbmjGEwITk5CK9y7+Rg27Fokgj9QEjgc9wST6MA3s
       '';
 
       programs.fish.shellAbbrs = {