{ config, pkgs, ... }:

{
  # enable smart card reader driver
  services.pcscd.enable = true;
  security.apparmor.enable = true;
  programs.firejail.enable = true;
  # programs.firejail.wrappedBinaries = {
  #   signal-desktop = {
  #     executable = "${pkgs.signal-desktop}/bin/signal-desktop --enable-features=UseOzonePlatform --ozone-platform=wayland";
  #     profile = "${pkgs.firejail}/etc/firejail/signal-desktop.profile";
  #     extraArgs = [ "--env=LC_ALL=C" "--env=GTK_THEME=Adwaita:dark" ];
  #   };
  # };
  
  environment.systemPackages = [
    pkgs.gnupg
    pkgs.pinentry-gnome3
  ];

  # # yubikey stuff
  # services.udev.packages = [ pkgs.yubikey-personalization ];
  # environment.systemPackages = [
  #   pkgs.yubikey-personalization
  #   pkgs.yubikey-personalization-gui
  #   pkgs.yubikey-manager
  #   pkgs.yubikey-manager-qt
  #   pkgs.yubioath-flutter
  #   pkgs.gnupg
  #   pkgs.pinentry-gnome3
  # ];

  networking.firewall.checkReversePath = false; 
}