gnupg fix, add yubikey support

2026-07-09 07:21:44 -06:00
parent 914055e584
commit b1a6653f94
3 changed files with 16 additions and 6 deletions
@@ -1,8 +1,20 @@
 {
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+  services.pcscd.enable = true;
+  services.udev.packages = [ pkgs.yubikey-personalization ];
  security = {
    sudo.execWheelOnly = true;
    polkit.enable = true;
    protectKernelImage = true;
+    pam.yubico = {
+       enable = true;
+       debug = true;
+       mode = "challenge-response";
+       id = [ "19694730" ];
+    };
    tpm2 = {
      enable = true;
      pkcs11.enable = true;