diff --git a/.config/git/allowed_signers b/.config/git/allowed_signers
new file mode 100644
index 0000000..d72829e
--- /dev/null
+++ b/.config/git/allowed_signers
@@ -0,0 +1 @@
+fanyx@posteo.net namespaces="git" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIED2cYmICgFveAdDIK1Ag/k5Rd+xtGRX7vTnCaDXiU75
diff --git a/.config/git/config b/.config/git/config
index e004bc7..26051bd 100644
--- a/.config/git/config
+++ b/.config/git/config
@@ -1,6 +1,12 @@
 [user]
     email = fanyx@posteo.net
     name = fanyx
+    signingkey = ~/.ssh/id_ed25519.pub
+
+[gpg]
+    format = ssh
+[gpg.ssh]
+    allowedSignersFile = ~/.config/git/allowed_signers
 
 [includeIf "gitdir:~/b1/"]
     path = ~/b1/.config/git/config
@@ -46,6 +52,9 @@
 [branch]
     sort = -committerdate
 
+[commit]
+    gpgsign = true
+
 [rebase]
     autosquash = true