merged atom with upstream

defaults.nix

@@ -31,6 +31,7 @@
     curl
     dpkg
     emacs
+    enca
     fail2ban
     file
     fortune
@@ -56,6 +57,7 @@
     mkpasswd
     ncurses5
     nix-index
+    nix-prefetch-git
     nmap
     oidentd
     openldap
@@ -80,6 +82,7 @@
     vim
     wget
     yubikey-manager
+    yubikey-personalization
   ];
 
   system.stateVersion = "20.03";
@@ -89,7 +92,6 @@
   environment.etc.current-nixos-config.source = ./.;
 
   krb5.enable = true;
-  krb5.libdefaults.default_realm = "FUDO.ORG";
   krb5.kerberos = pkgs.heimdalFull;
 
   services.xserver = {
@@ -110,6 +112,8 @@
     mosh.enable = true;
 
     ssh = {
+      startAgent = false;
+
       extraConfig = ''
         GSSAPIAuthentication yes
         GSSAPIDelegateCredentials yes
@@ -143,8 +147,21 @@
         GSSAPICleanupCredentials yes
     '';
     };
+
+    pcscd = {
+      enable = true;
+    };
+
+    udev.packages = with pkgs; [
+      yubikey-personalization
+    ];
   };
 
+  environment.shellInit = ''
+    gpg-connect-agent /bye
+    export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
+  '';
+
   security.pam = {
     enableSSHAgentAuth = true;
     # TODO: add yubico?
@@ -180,6 +197,9 @@
       group = "users";
       home = "/home/niten";
       hashedPassword = "$6$a1q2Duoe35hd5$IaZGXPfqyGv9uq5DQm7DZq0vIHsUs39sLktBiBBqMiwl/f/Z4jSvNZLJp9DZJYe5u2qGBYh1ca.jsXvQA8FPZ/";
+      openssh.authorizedKeys.keys = [
+        "ssh-rsa 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 openpgp:0x4EC95B64"
+      ];
     };
     reaper = {
       isNormalUser = true;