From 4c3f590364ac2ce678721068da094e407560c3aa Mon Sep 17 00:00:00 2001
From: sajenim <its.jassy@pm.me>
Date: Sun, 14 Apr 2024 21:57:21 +0800
Subject: [PATCH] yubikey gpg/cryptsetup

---
 nixos/common/optional/key.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/nixos/common/optional/key.nix b/nixos/common/optional/key.nix
index ebee0ad..f039b8d 100644
--- a/nixos/common/optional/key.nix
+++ b/nixos/common/optional/key.nix
@@ -2,10 +2,14 @@
 
 {
   environment.systemPackages = with pkgs; [
-    # Configure your YubiKey via the command line
-    yubikey-manager
     # Enables files to be encrypted to age identities stored on YubiKeys
     age-plugin-yubikey
+    # Cryptfile
+    cryptsetup
+    # Yubikey can be used as a smart card for secure encryption
+    gnupg
+    # Configure your YubiKey via the command line
+    yubikey-manager
   ];
 
   # Use our yubikey as a user login or for sudo access 
@@ -13,4 +17,7 @@
     login.u2fAuth = true;
     sudo.u2fAuth = true;
   };
+
+  # Enable udev rules for gnupg smart cards
+  hardware.gpgSmartcards.enable = true;
 }