{ den, lib, ... }:
let
  getPrimaryEmail =
    user:
    (lib.findFirst (email: email.primary) (throw "Missing primary email for ${user.userName}") (
      builtins.attrValues user.emails
    )).address;
in
{
  lux.git = den.lib.parametric {
    includes = [
      (
        { user, ... }:
        {
          homeManager.programs.git = {
            enable = true;
            signing.format = "ssh";
            ignores = [
              ".claude/"
              ".codex/"
            ];
            settings = {
              user.name = user.realName;
              user.email = getPrimaryEmail user;
              init.defaultBranch = "main";
            };
          };
        }
      )
    ];
  };
}