diff --git a/dot_config/private_jj/config.toml b/dot_config/private_jj/config.toml
deleted file mode 100644
index a5ffb5fc246e4a032574dc315e46a183fdbd57e7..0000000000000000000000000000000000000000
--- a/dot_config/private_jj/config.toml
+++ /dev/null
@@ -1,6 +0,0 @@
-[user]
-name = "Amolith"
-email = "amolith@secluded.site"
-
-[ui]
-diff-editor = "meld"
diff --git a/dot_config/private_jj/config.toml.tmpl b/dot_config/private_jj/config.toml.tmpl
new file mode 100644
index 0000000000000000000000000000000000000000..d6afe5ad55140ca38eb9247438ec94b211e765b9
--- /dev/null
+++ b/dot_config/private_jj/config.toml.tmpl
@@ -0,0 +1,28 @@
+[user]
+name = "Amolith"
+email = "amolith@secluded.site"
+
+[ui]
+diff-editor = "meld"
+pager = "delta"
+editor = "vim"
+show-cryptographic-signatures = true
+
+[signing]
+backend = "ssh"
+{{- if ne .chezmoi.username "exedev" }}
+behavior = "own"
+{{- end }}
+
+[signing.backends.ssh]
+{{- if eq .chezmoi.hostname "angmar" }}
+key = "~/.ssh/yk-stationary.pub"
+{{- else }}
+key = "~/.ssh/yk-mobile.pub"
+{{- end }}
+allowed-signers = "/home/amolith/.ssh/allowed_signers"
+
+[git]
+{{- if ne .chezmoi.username "exedev" }}
+sign-on-push = true
+{{- end }}