diff --git a/git/etc/README.md b/git/etc/README.md
new file mode 100644
index 0000000..6d62ffb
--- /dev/null
+++ b/git/etc/README.md
@@ -0,0 +1,8 @@
+This `/etc/gitconfig` currently just "documents" how to enable signed git
+pushes, however it requires a recent git version on the server too to allow
+SSH.
+
+Client-side: `git config --global push.gpgSign if-asked` (to not die when
+server doesn't support it)
+
+Source: https://people.kernel.org/monsieuricon/signed-git-pushes via https://github.com/go-gitea/gitea/issues/13454
diff --git a/git/etc/gitconfig b/git/etc/gitconfig
new file mode 100644
index 0000000..7f3158b
--- /dev/null
+++ b/git/etc/gitconfig
@@ -0,0 +1,3 @@
+[receive]
+    advertisePushOptions = true
+    certNonceSeed = "<uniquerandomstring>"