diff --git a/installer/lib/postinstall.sh b/installer/lib/postinstall.sh
index c62c9d6..c50ea1e 100755
--- a/installer/lib/postinstall.sh
+++ b/installer/lib/postinstall.sh
@@ -88,6 +88,12 @@ EOF
     fi
     chmod 440 "$TARGET/etc/sudoers.d/10-wheel"
 
+    # git: use file-based credential store so push/pull never tries to open /dev/tty
+    cat > "$TARGET/etc/gitconfig" <<'EOF'
+[credential]
+	helper = store
+EOF
+
     ok "user '$USERNAME' created and added to: $USER_GROUPS"
 }
 
diff --git a/iso/build-live-iso.sh b/iso/build-live-iso.sh
index b2c8757..cbe0929 100755
--- a/iso/build-live-iso.sh
+++ b/iso/build-live-iso.sh
@@ -653,6 +653,12 @@ EOF
 install -d -m 0755 "$INCLUDE_DIR/etc/skel/.config/nixpkgs"
 echo '{ allowUnfree = true; }' > "$INCLUDE_DIR/etc/skel/.config/nixpkgs/config.nix"
 
+# git: use file-based credential store so push/pull never tries to open /dev/tty
+cat > "$INCLUDE_DIR/etc/gitconfig" <<'EOF'
+[credential]
+	helper = store
+EOF
+
 # ── 3g) Skel: .bash_profile sources .bashrc only (no first-login autorun) ──
 install -d -m 0755 "$INCLUDE_DIR/etc/skel"
 cat > "$INCLUDE_DIR/etc/skel/.bash_profile" <<'EOF'
diff --git a/iso/build-niri-live-iso.sh b/iso/build-niri-live-iso.sh
index 9c1190f..4b97ffe 100755
--- a/iso/build-niri-live-iso.sh
+++ b/iso/build-niri-live-iso.sh
@@ -264,6 +264,12 @@ EOF
 install -d -m 0755 "$INCLUDE_DIR/etc/skel/.config/nixpkgs"
 echo '{ allowUnfree = true; }' > "$INCLUDE_DIR/etc/skel/.config/nixpkgs/config.nix"
 
+# git: use file-based credential store so push/pull never tries to open /dev/tty
+cat > "$INCLUDE_DIR/etc/gitconfig" <<'EOF'
+[credential]
+	helper = store
+EOF
+
 # ── 3e) niri config.kdl in /etc/skel ───────────────────────────────────
 # dracut's adduser.sh copies skel → /home/live, so the live user gets a
 # ready niri config without any first-boot setup step.