Begun yubikey integration

modules/home/default.nix

@@ -9,6 +9,7 @@
     ./nvf.nix
     ./packages.nix
     ./plasma.nix
+    ./ssh.nix
     ./stylix.nix
     ./vscode.nix
     ./zsh.nix

modules/home/packages.nix

@@ -9,7 +9,6 @@
     discord
     sqlitebrowser
     drawio
-    bitwarden-desktop
 
     # Libre Office
     libreoffice-qt

modules/home/ssh.nix

@@ -0,0 +1,30 @@
+{
+  ...
+}:
+{
+  programs.ssh = {
+    enable = true;
+    enableDefaultConfig = false;
+    matchBlocks = {
+      "*" = {
+        addKeysToAgent = "yes";
+        identityFile = [ "~/.ssh/id_ed25519_sk_rk" ];
+      };
+      "stu" = {
+        hostname = "stu.cs.jmu.edu";
+        user = "tamassno";
+        localForwards = [
+          {
+            bind.port = 5432;
+            host = {
+              address = "data.cs.jmu.edu";
+              port = 5432;
+            };
+          }
+        ];
+        serverAliveCountMax = 5;
+        serverAliveInterval = 60;
+      };
+    };
+  };
+}

modules/home/zsh.nix

@@ -79,8 +79,8 @@
       enableCompletion = true;
       autosuggestion.enable = true;
       syntaxHighlighting.enable = true;
-      sessionVariables = {
+      shellAliases = {
-        SSH_AUTH_SOCK = "/home/eclypse/.bitwarden-ssh-agent.sock";
+        stu = "ssh tamassno@stu.cs.jmu.edu";
       };
     };
   };

modules/system/security.nix

@@ -2,6 +2,15 @@
   ...
 }:
 {
+  programs = {
+    yubikey-manager.enable = true;
+    yubikey-touch-detector.enable = true;
+  };
+
+  services = {
+    yubikey-agent.enable = true;
+  };
+
   security = {
     rtkit.enable = true;
   };

modules/system/user.nix

@@ -22,6 +22,8 @@
       };
       programs.home-manager.enable = true;
     };
+
+    backupFileExtension = "backup";
   };
 
   users.mutableUsers = false;