Configure flake auto-upgrade

configuration.nix

@@ -103,12 +103,6 @@ with pkgs;
     interval = "monthly";
   };
 
-  # Auto-upgrade the system and reboot if needed
-  system.autoUpgrade = {
-    enable = true;
-    allowReboot = true;
-  };
-
   # Run Nix garbage collector, while avoiding recompilation and enable flakes
   nix = {
     settings.auto-optimise-store = true;
@@ -166,9 +160,34 @@ with pkgs;
       owner = "miniflux";
       group = "miniflux";
     };
+    secrets.git.file = secrets/git.age;
     identityPaths = [ "/etc/ssh/id_ed25519" ];
   };
 
+  # Auto-upgrade the system
+  system.autoUpgrade = {
+    enable = true;
+    flake = "/home/coolneng/system";
+    flags = [
+      "--update-input"
+      "agenix"
+      "--update-input"
+      "nixpkgs"
+      "--commit-lock-file"
+    ];
+  };
+
+  # Configure git for auto-upgrade
+  programs.git = {
+    enable = true;
+    config = {
+      user.name = "coolneng";
+      user.email = "akasroua@gmail.com";
+      safe.directory = "/home/coolneng/system";
+      credential.helper = "store --file ${config.age.secrets.git.path}";
+    };
+  };
+
   # Import other configuration modules
   imports = [
     ./modules/hardware-configuration.nix