added stuff

nyx/hosts/erebus/yubikey.nix

@@ -0,0 +1,127 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: let
+  drduhConfig = pkgs.fetchFromGitHub {
+    owner = "drduh";
+    repo = "config";
+    rev = "6bea1fdaa8732ec8625f4bac7022b25e14b15ffe";
+    hash = "sha256-Fto8FCVYeKviMz0VmCiXHrgMT1pVopJGGDHF0s3K4ts=";
+  };
+
+  gpg-conf = "${drduhConfig}/gpg.conf";
+
+  yubico-guide = pkgs.stdenv.mkDerivation {
+    name = "yubikey-guide.html";
+    src = pkgs.fetchFromGitHub {
+      owner = "drduh";
+      repo = "YubiKey-Guide";
+      rev = "fec6e92b8f05c899eccc7f2f2b273d609ed6094e";
+      hash = "sha256-N76e/yhXUoWUK6EQZHGyTs0DcbZqAlI5xtQMf0squR8=";
+    };
+    buildInputs = [pkgs.pandoc];
+    installPhase = "pandoc --highlight-style pygments -s --toc README.md -o $out";
+  };
+
+  guide = "${yubico-guide}/README.md";
+  contrib = "${yubico-guide}/contrib";
+
+  # Instead of hard-coding the pinentry program, chose the appropriate one
+  # based on the environment of the image the user has chosen to build.
+  gpg-agent-conf = pkgs.runCommand "gpg-agent.conf" {} ''
+    sed '/pinentry-program/d' ${drduhConfig}/gpg-agent.conf > $out
+    echo "pinentry-program ${pkgs.pinentry.${pinentryFlavour}}/bin/pinentry" >> $out
+  '';
+
+  xserverCfg = config.services.xserver;
+  pinentryFlavour =
+    if xserverCfg.desktopManager.lxqt.enable || xserverCfg.desktopManager.plasma5.enable
+    then "qt"
+    else if xserverCfg.desktopManager.xfce.enable
+    then "gtk2"
+    else if xserverCfg.enable || config.programs.sway.enable
+    then "gnome3"
+    else "curses";
+
+  view-yubikey-guide = pkgs.writeShellScriptBin "view-yubikey-guide" ''
+    viewer="$(type -P xdg-open || true)"
+    if [ -z "$viewer" ]; then
+      viewer="${pkgs.glow}/bin/glow -p"
+    fi
+    exec $viewer "${guide}"
+  '';
+
+  shortcut = pkgs.makeDesktopItem {
+    name = "yubikey-guide";
+    icon = "${pkgs.yubikey-manager-qt}/share/ykman-gui/icons/ykman.png";
+    desktopName = "drduh's YubiKey Guide";
+    genericName = "Guide to using YubiKey for GPG and SSH";
+    comment = "Open the guide in a reader program";
+    categories = ["Documentation"];
+    exec = "${view-yubikey-guide}/bin/view-yubikey-guide";
+  };
+
+  yubikey-guide = pkgs.symlinkJoin {
+    name = "yubikey-guide";
+    paths = [view-yubikey-guide shortcut];
+  };
+in {
+  environment.interactiveShellInit = ''
+    # unset HISTFILE
+    export GNUPGHOME="/run/user/$(id -u)/gnupg"
+    if [ ! -d "$GNUPGHOME" ]; then
+      echo "Creating \$GNUPGHOME…"
+      install --verbose -m=0700 --directory="$GNUPGHOME"
+    fi
+    [ ! -f "$GNUPGHOME/gpg.conf" ] && cp --verbose ${gpg-conf} "$GNUPGHOME/gpg.conf"
+    [ ! -f "$GNUPGHOME/gpg-agent.conf" ] && cp --verbose ${gpg-agent-conf} "$GNUPGHOME/gpg-agent.conf"
+    echo "\$GNUPGHOME is \"$GNUPGHOME\""
+  '';
+
+  # Yubikey Tooling
+  environment.systemPackages = with pkgs; [
+    yubikey-personalization
+    cryptsetup
+    pwgen
+    midori
+    paperkey
+    gnupg
+    ctmg
+  ];
+
+  services = {
+    udev.packages = with pkgs; [yubikey-personalization];
+    pcscd.enable = true;
+  };
+
+  programs = {
+    ssh.startAgent = false;
+    gnupg.agent = {
+      enable = true;
+      enableSSHSupport = true;
+    };
+  };
+
+  services.xserver.displayManager.sessionCommands = ''
+    ${lib.getExe pkgs.zathura} ${guide} &
+    ${lib.getExe pkgs.kitty} &
+  '';
+
+  # Copy the contents of contrib to the home directory, add a shortcut to
+  # the guide on the desktop, and link to the whole repo in the documents
+  # folder.
+  system.activationScripts.yubikeyGuide = let
+    homeDir = "/home/nixos/";
+    desktopDir = homeDir + "Desktop/";
+    documentsDir = homeDir + "Documents/";
+  in ''
+    mkdir -p ${desktopDir} ${documentsDir}
+    chown nixos ${homeDir} ${desktopDir} ${documentsDir}
+
+    cp -R ${contrib}/* ${homeDir}
+    ln -sf ${yubikey-guide}/share/applications/yubikey-guide.desktop ${desktopDir}
+    ln -sfT ${yubikey-guide} ${documentsDir}/YubiKey-Guide
+  '';
+}