From a8ef8e43b913adea7131ee678a4467e62b70d9b1 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Wed, 6 Aug 2025 13:57:25 -0600
Subject: [PATCH] modules/yubico: initialcommit

---
 modules/yubico/default.nix | 13 +++++++++++++
 modules/yubico/hm.nix      |  9 +++++++++
 modules/yubico/sys.nix     | 14 ++++++++++++++
 3 files changed, 36 insertions(+)
 create mode 100644 modules/yubico/default.nix
 create mode 100644 modules/yubico/hm.nix
 create mode 100644 modules/yubico/sys.nix

diff --git a/modules/yubico/default.nix b/modules/yubico/default.nix
new file mode 100644
index 0000000..71bed70
--- /dev/null
+++ b/modules/yubico/default.nix
@@ -0,0 +1,13 @@
+{
+  config,
+  lib,
+  pkgs,
+  doctrine,
+  ...
+}:
+doctrine.lib.mkModule {
+  inherit config;
+  name = "yubico";
+  hm = ./hm.nix;
+  sys = ./sys.nix;
+}
diff --git a/modules/yubico/hm.nix b/modules/yubico/hm.nix
new file mode 100644
index 0000000..8d06368
--- /dev/null
+++ b/modules/yubico/hm.nix
@@ -0,0 +1,9 @@
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  home.packages = [
+    pkgs.yubikey-manager
+  ];
+}
diff --git a/modules/yubico/sys.nix b/modules/yubico/sys.nix
new file mode 100644
index 0000000..3cd009f
--- /dev/null
+++ b/modules/yubico/sys.nix
@@ -0,0 +1,14 @@
+{
+  pkgs,
+  lib,
+  ...
+}: {
+  environment.etc."pkcs11/modules/ykcs11".text = ''
+    module: ${pkgs.yubico-piv-tool}/lib/libykcs11.so
+  '';
+
+  services = {
+    pcscd.enable = true;
+    udev.packages = [pkgs.yubikey-personalization];
+  };
+}