modify_dot_gitconfig

#!/bin/bash
# chezmoi modify script for .gitconfig
# Preserves unmanaged sections (like [credential] injected by DevPod)

# Read current file from stdin
current=$(cat)

# Extract unmanaged sections (e.g., [credential] injected by DevPod)
preserved=$(echo "$current" | awk '
  /^\[credential\]/ { found=1 }
  /^\[/ && !/^\[credential\]/ { found=0 }
  found { print }
')

# Write our managed template
cat << 'MANAGED'
[core]
  pager = delta
  editor = nvim
  excludesFile = ~/.gitignore.everywhere
[gpg]
  format = ssh
[gpg "ssh"]
  program = ssh-keygen
	allowedSignersFile = /home/owner/.ssh/allowed_signers
[user]
  signingkey = ~/.ssh/git-signing.pub
[commit]
  # Note: before disabling, consider `--no-gpg-sign` where needed
  # example: git rebase --interactive --no-gpg-sign && git commit --amend
  gpgsign = true
[pull]
  ff = only
[push]
  default = simple
  autoSetupRemote = true
[url "git@github.com:"]
  pushInsteadOf = git://github.com/
  pushInsteadOf = https://github.com/
[alias]
  cl = clone
  co = checkout
  br = branch
  ci = commit
  st = status
  lg = log --oneline --decorate --graph --all
  r = remote
  re = remote
  sw = switch
[color]
  ui = true
[interactive]
  diffFilter = delta --color-only
[add.interactive]
  useBuiltin = false # required for git 2.37.0
[delta]
  features = side-by-side line-numbers decorations
  syntax-theme = tokyonight_moon
  side-by-side = true
  hunk-header-style = syntax
[delta "decorations"]
  commit-decoration-style = bold yellow box ul
  file-style = bold yellow ul
  file-decoration-style = none
[merge]
  tool = nvimdiff
  conflictstyle = zdiff3
[mergetool "nvimdiff"]
  layout = "LOCAL,BASE,REMOTE / MERGED"
[mergetool]
  prompt = true
[diff]
  colorMoved = default
[init]
  defaultBranch = main
[pager]
  branch = false
MANAGED

# Append preserved sections if any
if [ -n "$preserved" ]; then
  echo "$preserved"
fi