4 files changed, 32 insertions, 0 deletions
diff --git a/home/age/default.nix b/home/age/default.nix
new file mode 100644
index 0000000..0e2fd13
--- /dev/null
+++ b/home/age/default.nix
@@ -0,0 +1,16 @@
+{ pkgs, config, lib, ... }:
+let cfg = config.my.home.age;
+in
+{
+  options.my.home.age = with lib; {
+    enable = mkEnableOption "r|age tooling";
+  };
+
+  config = lib.mkIf cfg.enable {
+    home.packages = with pkgs; [
+      age # https://github.com/FiloSottile/age
+      rage # https://github.com/str4d/rage
+      age-plugin-yubikey # https://github.com/str4d/age-plugin-yubikey
+    ];
+  };
+}
diff --git a/home/default.nix b/home/default.nix
index 9193392..c778c6c 100644
--- a/home/default.nix
+++ b/home/default.nix
@@ -2,6 +2,7 @@
 
 {
   imports = [
+    ./age
     ./beets
     ./bluetooth
     ./direnv
@@ -39,5 +40,6 @@
     ./wm
     ./xdg
     ./yt-dlp
+    ./yubikey
   ];
 }
diff --git a/home/yubikey/default.nix b/home/yubikey/default.nix
new file mode 100644
index 0000000..640ed09
--- /dev/null
+++ b/home/yubikey/default.nix
@@ -0,0 +1,12 @@
+{ pkgs, config, lib, ... }:
+let cfg = config.my.home.yubikey;
+in
+{
+  options.my.home.yubikey = with lib; {
+    enable = mkEnableOption "yubikey tooling";
+  };
+
+  config = lib.mkIf cfg.enable {
+    home.packages = with pkgs; [ yubikey-manager ];
+  };
+}
diff --git a/hosts/aptos/home.nix b/hosts/aptos/home.nix
index 5bc02db..cccf871 100644
--- a/hosts/aptos/home.nix
+++ b/hosts/aptos/home.nix
@@ -46,6 +46,7 @@
     yt-dlp.enable = true;
 
     # security
+    age.enable = true;
     gpg = {
       enable = true;
       pinentry = "gnome3";
@@ -53,5 +54,6 @@
     };
     pass.enable = true;
     seahorse.enable = true;
+    yubikey.enable = true;
   };
 }