[eid] Attempt at fixing eid on NixOS

nixos/hosts/Tibo-NixFat/default.nix

@@ -8,9 +8,13 @@
   sisyphus = {
     desktop.sway.enable = true;
 
-    hardware.nvidia = {
+    hardware = {
-      enable = true;
+      eid.enable = true;
-      model = "Quadro T2000";
+      nvidia = {
+        enable = true;
+        model = "Quadro T2000";
+      };
+      yubikey.enable = true;
     };
 
     networking = {
@@ -31,7 +35,6 @@
     };
 
     services = {
-      monero.enable = true;
       pipewire.enable = true;
       tailscale.enable = true;
     };
@@ -39,7 +42,7 @@
     users.tdpeuter.enable = true;
 
     virtualisation = {
-      qemu.enable = true;
+      docker.enable = true;
       virtualbox.enable = true;
     };
   };

nixos/modules/hardware/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
+    ./eid
     ./nvidia
     ./yubikey
   ];

nixos/modules/hardware/eid/default.nix

@@ -0,0 +1,18 @@
+{ config, lib, pkgs-unstable, ... }:
+
+let
+  cfg = config.sisyphus.hardware.eid;
+in {
+  options.sisyphus.hardware.eid.enable = lib.mkEnableOption "Electronic identity card (eID)";
+
+  config = lib.mkIf cfg.enable {
+    services.pcscd = {
+      enable = true;
+      plugins = [ pkgs-unstable.ccid ];
+    };
+
+    environment.systemPackages = with pkgs-unstable; [
+      eid-mw
+    ];
+  };
+}

nixos/users/tdpeuter/firefox.nix

@@ -18,42 +18,44 @@ in {
           DisableFirefoxStudies = true;
           DisablePocket = true;
           DisableTelemetry = true;
-          ExtensionSettings = {};
           OfferToSaveLogins = false;
         };
+        # Support smart cards
+        pkcs11Modules = with pkgs-unstable; [
+          eid-mw
+        ];
       };
-      profiles.tdpeuter = {
-        search = {
-          default = "DuckDuckGo";
-          force = true;
-          engines = {
-            "Bing".metaData.hidden = true;
-            "eBay".metaData.hidden = true;
 
-            "Nix Packages" = {
+      profiles.tdpeuter.search = {
-              urls = [{
+        default = "DuckDuckGo";
-                template = "https://search.nixos.org/packages";
+        force = true;
-                params = [
+        engines = {
-                  { name = "type"; value = "packages"; }
+          "Bing".metaData.hidden = true;
-                  { name = "query"; value = "{searchTerms}"; }
+          "eBay".metaData.hidden = true;
-                ];
-              }];
 
-              icon = "${pkgs.nixos-icons}/share/icons/hicolor/scalable/apps/nix-snowflake.svg";
+          "Nix Packages" = {
-              definedAliases = [ "@np" ];
+            urls = [{
-            };
+              template = "https://search.nixos.org/packages";
-            "GitHub" = {
+              params = [
-              urls = [{
+                { name = "type"; value = "packages"; }
-                template = "https://github.com/search";
+                { name = "query"; value = "{searchTerms}"; }
-                params = [
+              ];
-                  { name = "q"; value = "{searchTerms}"; }
+            }];
-                  { name = "type"; value = "repositories"; }
-                ];
-              }];
 
-              icon = "${pkgs.icosystem}/share/icons/icosystem/scalable/apps/github-mark.svg";
+            icon = "${pkgs.nixos-icons}/share/icons/hicolor/scalable/apps/nix-snowflake.svg";
-              definedAliases = [ "@gh" ];
+            definedAliases = [ "@np" ];
-            };
+          };
+          "GitHub" = {
+            urls = [{
+              template = "https://github.com/search";
+              params = [
+                { name = "q"; value = "{searchTerms}"; }
+                { name = "type"; value = "repositories"; }
+              ];
+            }];
+
+            icon = "${pkgs.icosystem}/share/icons/icosystem/scalable/apps/github-mark.svg";
+            definedAliases = [ "@gh" ];
           };
         };
       };