Setup credentials for git to automatically use the read-only PAT when

pulling changes from this repo

nixos/configuration.nix

@@ -16,12 +16,20 @@
     efiInstallAsRemovable = true;
   };
 
-  environment.systemPackages = map lib.lowPrio [
-    pkgs.curl
-    pkgs.gitMinimal
-    pkgs.neovim
+  environment.systemPackages = with pkgs; map lib.lowPrio [
+    curl
+    gitMinimal
+    neovim
   ];
 
+  programs.git = {
+    enable = true;
+    extraConfig = ''
+      [credential]
+        helper = store
+    '';
+  };
+
   services.openssh.enable = true;
   services.openssh.passwordAuthentication = false;