sisyphus/nixos/modules/hardware/yubikey/default.nix

{ config, lib, pkgs, ... }:

let
  cfg = config.sisyphus.hardware.yubikey;
in {
  options.sisyphus.hardware.yubikey.enable = lib.mkEnableOption "YubiKey support";

  config = lib.mkIf cfg.enable {
    programs.gnupg.agent = {
      enable = true;
      # TODO Necessary?
      # enableSSHSupport = true;
      # pinentryFlavor = "curses";
    };

    # Enable smart card reading
    services.pcscd.enable = true;
  };
}