niksos/hosts/common/optional/yubikey.nix

{
    # config,
    pkgs,
    ...
}: {
# }: let
#     # inherit (config.poz.other.system) username;
# in {
    security.pam = {
        services = {
            login.u2fAuth = true;
            sudo.u2fAuth = true;
        };
    };

    services.udev = {
        packages = [ pkgs.yubikey-personalization ];
    };

    # age.secrets.yubikey-u2f-keys.file = ../../secrets/yubikey-u2f-keys.age;

    # environment.etc."Yubico/u2f_keys".source = config.age.secrets.yubikey-u2f-keys.path;

    # home-manager.users.${username} = {
    #     xdg.configFile."Yubico/u2f_keys".source = /etc/Yubico/u2f_keys;
    # };
}