gpg

modules/nixos/security/default.nix

@@ -3,6 +3,11 @@
   security = {
     rtkit.enable = lib.mkDefault true;
 
+    pam.u2f = {
+      enable = true;
+      settings.cue = true;
+    };
+
     # configure sudo
     sudo.enable = lib.mkDefault false;
     sudo-rs = {
@@ -28,4 +33,22 @@
       ];
     };
   };
+
+  environment.systemPackages = with pkgs; [
+    age-plugin-yubikey
+    yubikey-manager
+    yubikey-personalization
+    yubioath-flutter
+  ];
+
+  services = {
+    yubikey-agent.enable = true;
+    pcscd.enable = true;
+  };
+
+  programs = {
+    yubikey-touch-detector = {
+      enable = true;
+    };
+  };
 }