diff --git a/files/git/allowed_signers b/files/git/allowed_signers
new file mode 100644
index 0000000..8deeaa3
--- /dev/null
+++ b/files/git/allowed_signers
@@ -0,0 +1 @@
+ovy@ovyerus.com sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOIz4psdKMWtvARSsE095N8ERtaH0Gu0VkJSluO5Kd6XAAAABHNzaDo=
diff --git a/home.nix b/home.nix
index 8289866..2a6bf59 100644
--- a/home.nix
+++ b/home.nix
@@ -35,6 +35,7 @@
 
   xdg.configFile = {
     "karabiner/assets/complex_modifications/meh.json".source = ./files/karabiner/meh.json;
+    "git/allowed_signers".source = ./files/git/allowed_signers;
   };
 
   programs.git = {
@@ -47,14 +48,15 @@
     extraConfig = {
       pull.rebase = true;
       init.defaultBranch = "main";
+      log.showSignature = true;
 
+      gpg.ssh.allowedSignersFile = "~/.config/git/allowed_signers";
       user.signingKey = "~/.ssh/id_ed25519_sk_rk";
       gpg.format = "ssh";
       commit.gpgsign = true;
       tag.gpgsign = true;
-
-      # "gpg \"ssh\"".program = "gfh-keygen";
-      # "gpg \"ssh\"".defaultKeyCommand = "gfh";
+      # "gpg.ssh.program = "gfh-keygen";
+      # "gpg.ssh.defaultKeyCommand = "gfh";
     };
   };