diff --git a/flake.nix b/flake.nix
index c562b86..d762423 100644
--- a/flake.nix
+++ b/flake.nix
@@ -28,7 +28,6 @@
         {
           default = pkgs.mkShell {
             packages = with pkgs; [
-              git-crypt
               stylua # lua formatter
               ormolu # haskell formatter
             ];
diff --git a/home/home.nix b/home/home.nix
index 4a4c770..c205aed 100644
--- a/home/home.nix
+++ b/home/home.nix
@@ -69,6 +69,8 @@ in
       enable = true;
       gpgKey = secrets.gpgSigningKey;
       inherit (secrets) userName userEmail;
+
+      git-crypt.enable = true;
     };
 
     # password manager
diff --git a/home/progs/git.nix b/home/progs/git.nix
index 076d279..89b9ffa 100644
--- a/home/progs/git.nix
+++ b/home/progs/git.nix
@@ -28,9 +28,19 @@ in
       default = null;
       description = "The default GnuPG signing key fingerprint";
     };
+
+    git-crypt = {
+      enable = mkOption {
+        type = types.bool;
+        default = false;
+        description = "Add git-crypt package";
+      };
+    };
   };
 
   config = mkIf cfg.enable {
+    home.packages = mkIf cfg.git-crypt.enable [ pkgs.git-crypt ];
+
     programs.git = {
       enable = true;
       userName = cfg.userName;