diff --git a/modules/hardware/default.nix b/modules/hardware/default.nix
index 7ea0b04..e590457 100644
--- a/modules/hardware/default.nix
+++ b/modules/hardware/default.nix
@@ -7,9 +7,10 @@
     ./drive-monitor
     ./firmware
     ./graphics
+    ./id-card
     ./keychron
-    ./yubikey
     ./sound
     ./thunderbolt
+    ./yubikey
   ];
 }
diff --git a/modules/hardware/id-card/default.nix b/modules/hardware/id-card/default.nix
new file mode 100644
index 0000000..1e7ed5b
--- /dev/null
+++ b/modules/hardware/id-card/default.nix
@@ -0,0 +1,16 @@
+{ config, lib, ... }:
+let
+  cfg = config.my.hardware.id-card;
+in
+{
+  options.my.hardware.id-card = with lib; {
+    enable = mkEnableOption "german id card authentication";
+  };
+
+  config = lib.mkIf cfg.enable {
+    programs.ausweisapp = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}