add store as git credential helper

home/modules/git.nix

@@ -1,4 +1,8 @@
-{ config, lib, ... }:
+{
+  config,
+  lib,
+  ...
+}:
 {
   options = {
     youthlic.programs.git = {
@@ -41,6 +45,9 @@
           git_protocol = "ssh";
         };
       };
+      sops.secrets."gitea" = {
+        mode = "0440";
+      };
       programs.git = lib.mkMerge [
         {
           enable = true;
@@ -49,6 +56,11 @@
           delta = {
             enable = true;
           };
+          extraConfig = {
+            credential = {
+              helper = "store --file=${config.sops.secrets."gitea".path}";
+            };
+          };
         }
         (lib.mkIf (cfg.signKey != null) {
           signing = {

secrets/general.yaml

@@ -1,12 +1,13 @@
 ssh-private-key: ENC[AES256_GCM,data:TzcvWxAsQTmoGTR4xMsDIWTKIjr6InWUoqSz3zPnX6cIDyAMHQLN7cNRQcNJ9VAX1IxjlF6+WsTWZahKIZmQ0kfjWr9bsEcx6r4VZp73AGudP7UQ4ntmCYO5cw2iHTiGxbrdIPYYcPf4y7aRjusWxGDeqaPtRB20xGCMigKqazGBN3vsgnQXPj46wcwy7ibsCAtg1DBP1q9c8nspvVOL4bhByxjcLi2p3E54C79fTGOlKRx2HRZh6tFRxH56C6mnuFnDg+TF7I/5t3vw7+EBo7roVJJPypW0tRq+lnbmU4TFFEqf4v+2BaEVKtSBQZd4gb4PRyEgcmmrh2wJjx2JvBi4ansZZWB6d7GRHB1e1Yh16ONJ3Y1XuTjzVNPLbWtPAhPffcg6TDZzWrWxHqES7eI9p+0k8gZZv7vRZM5XpbXlcZpNm1XA2YktJL36asoE1ZjXLzDHNxLAGaq/l1tsxHzx/vZXhIw/dNFEF9xzXH7Jt9oY9I68VbLw/4F4C7epiRJK55Fj/3+ninrsTyMswDlNLfnO6skgpFFcWftTJOAIKhsA2v6a5Wh6jqa9JaxupdYD/ZC+Emp+mivT,iv:3j79GakhiOvvqYUiCc0RaWsD60xl1aRCKnJ0WuEFqt8=,tag:SsUiEzMs/aOwPrv2ZisklQ==,type:str]
+gitea: ENC[AES256_GCM,data:Jf09pulzq/db32Ax0kSCU8ew+XpsRmvJy61N070BJUR4KXIMnhd5mW5gMJpDg6mCs4hSbw==,iv:T+dDJar8On04jnCX3geGGAVeKRuLwLzgjKU9I9UzvSA=,tag:t5Ryd18XurrdyZoXUP57ew==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2025-01-10T12:20:53Z"
-    mac: ENC[AES256_GCM,data:9BvK132Z+BRb7Anu+jvM6Y6u6D8i05bdNWzQcSj3f6Jk9KkKtT/8HvNJB9RSveeFlamVet1rzXD83CGhGdYEcw74HECrKs9rxmCkZj/hY9jVfFPzuldDVW4UyZOKzArqAzzPH0OHpItDuW+feIqL4Lep6Jr5KuiLo1jypGV/XcI=,iv:not0EwyyMmRzgVYpgQzp0uDznOZASx+7BG+zpuBWQds=,tag:0gqyh3te9L+8QU3B3UZUjg==,type:str]
+    lastmodified: "2025-01-11T11:26:13Z"
+    mac: ENC[AES256_GCM,data:ZR7rAMs00ff+Ilp8HBMVq5oP1PX5NK6czNKYd/jIwqk4pr9sS5x8dQELJCLqe1DHC+CC6/qT3O/aCy9TKw2sWwFjYh0F3Ren/tH5UDpn7GVdEkm2lL3pCq6usFh7f7vE4ac5tBEEDvYVIAgFrBvDvwGtnNUoxMF1QqYAZAYMQIM=,iv:8/8r5QO93PuRMnPEweCuiWvJLUSgVzGBva3lJGJdqAc=,tag:9dmrXhwvWzwBbvZpWTz9nQ==,type:str]
     pgp:
         - created_at: "2025-01-10T12:20:32Z"
           enc: |-