modules/security.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

{
    config,
    options,
    lib,
    pkgs,
    ...
}: let

in {
    config = {
        security.polkit.enable = true;
        services.pcscd.enable = true;
        
        programs.gnupg.agent = {
            enable = true;
            enableSSHSupport = true;
        };

        environment.systemPackages = [
            pkgs.pinentry-curses
        ];

        home.packages = [
            (pkgs.pass.withExtensions (exts: [exts.pass-otp ]))
            pkgs.pinentry-qt
        ];
    };
}