add yubikey

modules/darwin/default.nix

@@ -8,6 +8,7 @@
 #    ./ssh
     ./tailscale
     ./syncthing
+    ./yubikey
 #    ./sops
   ];
 

modules/darwin/tailscale/default.nix

@@ -20,7 +20,6 @@ in {
     };
 
     homebrew = {
-
       casks = [
         "tailscale-app"
       ];

modules/darwin/yubikey/default.nix

@@ -0,0 +1,31 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+let
+  service = "yubikey";
+  cfg = config.system.${service};
+in {
+  options.system.${service} = {
+    enable = lib.mkEnableOption "enables ${service}";
+  };
+
+  config = lib.mkIf cfg.enable {
+
+    environment.systemPackages = with pkgs; [
+      yubikey-personalization
+      yubikey-manager
+      yubikey-piv-tool
+    ];
+
+    homebrew = {
+      casks = [
+        "yubico-authenticator"
+      ];
+    };
+
+
+  };
+}