{ config, lib, pkgs, ... }:

{

  services.pcscd.enable = true;
  programs.ssh.startAgent = false;

  environment.systemPackages = with pkgs; [
    yubikey-personalization
  ];

  services.udev.packages = [ pkgs.yubikey-personalization ];

  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
  };

  environment.shellInit = ''
    gpg-connect-agent /bye
    export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
  '';

}