init

modules/basic/security.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }:
+
+{
+  # enable smart card reader driver
+  services.pcscd.enable = true;
+
+  # yubikey stuff
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+  environment.systemPackages = [
+    pkgs.yubikey-personalization
+    pkgs.yubikey-personalization-gui
+    pkgs.yubikey-manager
+    pkgs.yubikey-manager-qt
+    pkgs.yubioath-flutter
+    pkgs.gnupg
+    pkgs.pinentry-gnome
+  ];
+}