From 0936a5d28f696478b979a1af6da0f5b76187dea3 Mon Sep 17 00:00:00 2001
From: twoneis <git@chpu.eu>
Date: Thu, 6 Mar 2025 16:37:29 +0100
Subject: [PATCH] first yubikey stuff added

---
 devices/inkvine/options.nix |  1 +
 modules/yubikey/default.nix | 13 ++++++++++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/devices/inkvine/options.nix b/devices/inkvine/options.nix
index e40db05..2951a1d 100644
--- a/devices/inkvine/options.nix
+++ b/devices/inkvine/options.nix
@@ -7,6 +7,7 @@
     secureboot.enable = true;
     containers.enable = true;
     networkmanager.enable = true;
+    yubikey.enable = true;
 
     stateVersion = "24.11";
     hmStateVersion = "24.11";
diff --git a/modules/yubikey/default.nix b/modules/yubikey/default.nix
index 479b475..657748e 100644
--- a/modules/yubikey/default.nix
+++ b/modules/yubikey/default.nix
@@ -7,5 +7,16 @@
   inherit (lib) mkIf;
   inherit (config) conf;
 in
-  mkIf conf.yuibkey.enable {
+  mkIf conf.yubikey.enable {
+    services.udev.packages = [pkgs.yubikey-personalization];
+    services.pcscd.enable = true;
+
+    programs.gnupg.agent = {
+      enable = true;
+      enableSSHSupport = true;
+    };
+
+    home-manager.users.${conf.username}.home.packages = with pkgs; [
+      yubioath-flutter
+    ];
   }