nix/module/common/Crypto.nix

{ pkgs, ... }: {
	# GPG.
	services.udev.packages = [ pkgs.yubikey-personalization ];

	programs.gnupg.agent = {
		enable = true;
		enableSSHSupport = true;
		pinentryPackage  = pkgs.pinentry-tty;
	};

	# PCSC.
	services.pcscd.enable = true;

	# Yubikey touch notification.
	# programs.yubikey-touch-detector.enable = true;

	# Extra packages.
	environment.systemPackages = with pkgs; [
		yubikey-manager  # Yubikey Manager.
		# yubioath-desktop # OTP.
	];

	# Store GPG data on tmpfs.
	environment.variables = {
		# GNUPGHOME = "$(mktemp -d -t gnupg-$(date +%Y-%m-%d)-XXXXXXXXXX)";
	};
}