+1 for checking in your config when you can mandate everyone uses the same tool chain. My point is more that the existence of global gitignore supports my open-source use case without precluding your corporate use case.

Gitignore settings don’t prevent checking in run configs if that’s what you want to do. Even if someone has the run configs pattern ignored, they’ll get those files with the repo clone. Gitignore only prevents adding files that aren’t already checked in - it’s a guard rail to prevent accidentally checking in so something you don’t want. You can override ignore settings to check in something new in with git add --force <filename>

nix-shell -p git

Or some even fancier ones:

nix-store -qR $(nix-build '<nixpkgs>' -A git --no-out-link)

or this command (which nix people avoid generally because it creates files outside of the store):

nix path-info -rSh $(nix-build '<nixpkgs>' -A git --no-out-link)

or

nix-env -p /tmp/clean-profile -iA nixpkgs.git && nix-store -qR /tmp/clean-profile


# then

rm /tmp/clean-profile* 

# to get rid of the temp files

and here’s how I personally implemented a global gitignore on my system. This is a redacted version of my git config:

 { lib, pkgs, ... }:

{
  home.packages = with pkgs; [
    diff-so-fancy # git diff with colors
    git-crypt # git files encryption
    hub # github command-line client
    tig # diff and commit view
  ];

  programs.git = {
    enable = true;

    settings = {
      alias = {
        amend = "commit --amend -m";
        fixup = "!f(){ git reset --soft HEAD~\${1} && git commit --amend -C HEAD; };f";
        loc = "!f(){ git ls-files | ${lib.exe pkgs.ripgrep} \"\\.\${1}\" | xargs wc -l; };f"; # lines of code
        br = "branch";
        co = "checkout";
        cob = "checkout -b";
        st = "status";
        ls = "log --pretty=format:\"%C(yellow)%h%Cred%d\\\\ %Creset%s%Cblue\\\\ [%cn]\" --decorate";
        ll = "log --pretty=format:\"%C(yellow)%h%Cred%d\\\\ %Creset%s%Cblue\\\\ [%cn]\" --decorate --numstat";
        cm = "commit -m";
        ca = "commit -am";
        dc = "diff --cached";
        rmain = "rebase main";
        rc = "rebase --continue";
      };
      core = {
        editor = "nvim";
        pager = "diff-so-fancy | less --tabs=4 -RFX";
      };
      init.defaultBranch = "main";
      merge = {
        conflictStyle = "diff3";
        tool = "vim_mergetool";
      };
      mergetool."vim_mergetool" = {
        #cmd = "nvim -d -c \"wincmd l\" -c \"norm ]c\" \"$LOCAL\" \"$MERGED\" \"$REMOTE\"";
        # this command requires the vim-mergetool plugin
        cmd = "nvim -f -c \"MergetoolStart\" \"$MERGED\" \"$BASE\" \"$LOCAL\" \"$REMOTE\"";
        prompt = false;
      };
      pull.rebase = false;
      push.autoSetupRemote = true;
      url = {
        "https://github.com/".insteadOf = "gh:";
        "ssh://[email protected]".pushInsteadOf = "gh:";
        "https://gitlab.com/".insteadOf = "gl:";
        "ssh://[email protected]".pushInsteadOf = "gl:";
      };
      user = {
        email = "redacted";
        name = "redacted";
      };
    };

    ignores = [
      "*.bloop"
      "*.bsp"
      "*.metals"
      "*.metals.sbt"
      "*metals.sbt"
      "*.direnv"
      "*.envrc" # there is lorri, nix-direnv & simple direnv; let people decide
      "*hie.yaml" # ghcide files
      "*.mill-version" # used by metals
      "*.jvmopts" # should be local to every project
      "build/" # smithy lsp
    ];

    signing = {
      key = "redacted";
      signByDefault = true;
    };

  } // (pkgs.sxm.git or { });
}