From 547a3bc8d464cb2a22e4cf0dbbb746f8c654151a Mon Sep 17 00:00:00 2001
From: Sylvain Fankhauser <sephi@fhtagn.top>
Date: Thu, 2 Mar 2023 12:27:57 +0100
Subject: [PATCH] git: allow tags to be unsigned when
 signing.signByDefault=true (#3479)

---
 modules/programs/git.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/programs/git.nix b/modules/programs/git.nix
index 0b5dae5bc..75f062f56 100644
--- a/modules/programs/git.nix
+++ b/modules/programs/git.nix
@@ -466,8 +466,8 @@ in {
     (mkIf (cfg.signing != null) {
       programs.git.iniContent = {
         user.signingKey = mkIf (cfg.signing.key != null) cfg.signing.key;
-        commit.gpgSign = cfg.signing.signByDefault;
-        tag.gpgSign = cfg.signing.signByDefault;
+        commit.gpgSign = mkDefault cfg.signing.signByDefault;
+        tag.gpgSign = mkDefault cfg.signing.signByDefault;
         gpg.program = cfg.signing.gpgPath;
       };
     })