yubikey: New module

hosts/nishimiya.nix

@@ -56,6 +56,7 @@
       direnv.enable = true;
     };
     services = {
+      yubikey.enable = true;
       cups.enable = true;
       gnome.enable = false;
       kanshi = let
@@ -123,7 +124,13 @@
     };
   };
 
-  virtualisation.docker.enable = true;
+  virtualisation = {
+    podman = {
+      enable = true;
+      dockerCompat = true;
+      dockerSocket.enable = true; 
+    };
+  };
   
   environment.systemPackages = with pkgs; [
     ansible
@@ -135,10 +142,11 @@
           mgba mupen64plus melonds desmume dolphin
         ];
       })
-
   ];
   
   programs = {
-    gnupg.agent.pinentryFlavor = "qt";
+    gnupg.agent = {
+      pinentryFlavor = "qt";
+    };
   };
 }

modules/default.nix

@@ -36,6 +36,7 @@
     ./services/greetd
     ./services/cups
     ./services/logiops
+    ./services/yubikey
 
     # User
     #./users/default.nix

modules/services/yubikey/default.nix

@@ -0,0 +1,31 @@
+{ lib, config, pkgs, ...}:
+
+let
+  cfg = config.ptw.services.yubikey;
+in {
+  options.ptw.services.yubikey = {
+    enable = lib.mkEnableOption "Enable everything for using a YubiKey";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services = {
+      # Unprivileged access to the YubiKey
+      udev.packages = [ pkgs.yubikey-personalization ];
+
+      # Allow using the YubiKey as a smart card
+      pcscd.enable = true;
+    };
+
+    environment.systemPackages = with pkgs; [
+      # Management
+      yubikey-manager-qt yubikey-manager yubico-piv-tool
+    ];
+
+    programs = {
+      gnupg.agent = {
+        enable = true;
+        enableSSHSupport = true;
+      };
+    };
+  };
+}