From 3a3c8ba6efdd261aec7b2acd5ad995cd13918ebe Mon Sep 17 00:00:00 2001
From: Ryota Ikezawa <pavegy@gmail.com>
Date: Wed, 4 Mar 2026 13:08:29 +0900
Subject: [PATCH] fix(git): limit 1Password signing key read to macOS only

EC2 also has op CLI (has_op=true) but lacks the private key
matching the 1Password signing key, causing ssh-keygen to fail
with "error in libcrypto". Restrict to darwin where op-ssh-sign
can access the key via 1Password SSH agent.
---
 .chezmoi.yaml.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.chezmoi.yaml.tmpl b/.chezmoi.yaml.tmpl
index de6798d..6b393dc 100644
--- a/.chezmoi.yaml.tmpl
+++ b/.chezmoi.yaml.tmpl
@@ -24,7 +24,7 @@
 {{-   end -}}
 {{- end -}}
 
-{{- if $hasOp -}}
+{{- if and $hasOp (eq .chezmoi.os "darwin") -}}
 {{-   $signingKey = onepasswordRead "op://Dotfiles/Git/signing_key" -}}
 {{- end -}}