yubi

flake.lock

@@ -1060,7 +1060,7 @@
         "flake-compat": "flake-compat_5",
         "nixos-images": "nixos-images",
         "nixpkgs": [
-          "nixpkgs"
+          "nixpkgs-stable"
         ]
       },
       "locked": {

flake.nix

@@ -48,7 +48,7 @@
 
     nixos-raspberrypi = {
       url = "github:mjallen18/nixos-raspberrypi";
-      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.nixpkgs.follows = "nixpkgs-stable";
     };
 
     jovian.url = "github:Jovian-Experiments/Jovian-NixOS";
@@ -205,9 +205,7 @@
           #                      Pi4                             #
           # ######################################################
           pi4 = {
-            specialArgs = {
-              nixpkgs = inputs.nixpkgs-stable;
-            };
+            channelName = "nixpkgs-stable";
             modules = with inputs; [
               disko.nixosModules.disko
               nixos-raspberrypi.nixosModules.raspberry-pi-4.base
@@ -223,9 +221,7 @@
           #                      Pi5                             #
           # ######################################################
           pi5 = {
-            # specialArgs = {
-            #   nixpkgs = inputs.nixpkgs-stable;
-            # };
+            channelName = "nixpkgs-stable";
             modules = with inputs; [
               disko.nixosModules.disko
               nixos-raspberrypi.nixosModules.raspberry-pi-5.base

modules/nixos/security/common/default.nix

@@ -1,4 +1,7 @@
-{ lib, pkgs, ... }:
+{ config, namespace, lib, pkgs, ... }:
+let
+  hasGui = config.${namespace}.desktop.hyprland.enable || config.${namespace}.desktop.gnome.enable || config.${namespace}.desktop.cosmic.enable;
+in
 {
   security = {
     rtkit.enable = lib.mkDefault true;
@@ -39,8 +42,7 @@
     libsecret
     yubikey-manager
     yubikey-personalization
-    yubioath-flutter
-  ];
+  ] ++ (if hasGui then [ yubioath-flutter ] else [ ]);
 
   services = {
     yubikey-agent.enable = true;