Extract of configuration.nix

  # Enabling hyprlnd on NixOS
  programs.hyprland = {
    enable = true;
    xwayland.enable = true;
  };

  # XDG portal
  xdg.portal.enable = true;
  xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];

  # Yubikey for GPG and SSH
  # https://nixos.wiki/wiki/Yubikey
  services.udev.packages = [ pkgs.yubikey-personalization ];

  # Yubico Authenticator (yubioath-flutter) Requires PCSCD
  # BUT...the Wiki states "...that the PCSC-Lite daemon sometimes conflicts with gpg-agent."
  services.pcscd.enable = true;

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;

  programs.gnupg.agent = {
      enable = true;
      enableSSHSupport = true;
  };

  # Enable the OpenSSH daemon.
  services.openssh = {
      enable = true;
      # require public key authentication for better security
      settings.PasswordAuthentication = false;
      settings.KbdInteractiveAuthentication = false;
      settings.PermitRootLogin = "no";
  };

  # Authorized SSH Public Keys
  users.users.r0b0ty.openssh.authorizedKeys.keys = [
      "[email protected] <cut>"
      # note: ssh-copy-id will add user@clientmachine after the public key
      # but we can remove the "@clientmachine" part
  ];

  # Enable the u2f PAM module for login and sudo requests
  security.pam.services = {
      login.u2fAuth = true;
      sudo.u2fAuth = true;
  };