home/profiles/security/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

{ config, lib, pkgs, ... }:
let cfg = config.profiles.security;
in
{
  options.profiles.security = {
    enable = lib.mkEnableOption
      "Profile for security-related packages";
  };

  config = lib.mkIf cfg.enable {
    home.packages = [
      pkgs.yubikey-manager
      pkgs.age-plugin-yubikey

      pkgs.keepassxc
      pkgs.bitwarden
      pkgs.bitwarden-cli

      pkgs.keyutils
    ];
  };
}