diff --git a/modules/common/git.nix b/modules/common/git.nix
index eaf960a..69da086 100644
--- a/modules/common/git.nix
+++ b/modules/common/git.nix
@@ -9,7 +9,10 @@
       };
       commit.gpgsign = true;
       pull.rebase = true;
-      gpg.format = "ssh";
+      gpg = {
+        format = "ssh";
+        ssh.allowedSignersFile = pkgs.writeText "allowedSigners" "henry@henryhiles.com ${builtins.elemAt (import ../../secrets/keys.nix) 0}";
+      };
     };
   };