From 7a51284072ab71e12f158410b2c0a225057e5b32 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Sun, 24 Dec 2023 00:07:29 +0100
Subject: [PATCH] hardware/id-card: init

---
 modules/hardware/default.nix         |  3 ++-
 modules/hardware/id-card/default.nix | 16 ++++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 modules/hardware/id-card/default.nix

diff --git a/modules/hardware/default.nix b/modules/hardware/default.nix
index 7ea0b04..e590457 100644
--- a/modules/hardware/default.nix
+++ b/modules/hardware/default.nix
@@ -7,9 +7,10 @@
     ./drive-monitor
     ./firmware
     ./graphics
+    ./id-card
     ./keychron
-    ./yubikey
     ./sound
     ./thunderbolt
+    ./yubikey
   ];
 }
diff --git a/modules/hardware/id-card/default.nix b/modules/hardware/id-card/default.nix
new file mode 100644
index 0000000..1e7ed5b
--- /dev/null
+++ b/modules/hardware/id-card/default.nix
@@ -0,0 +1,16 @@
+{ config, lib, ... }:
+let
+  cfg = config.my.hardware.id-card;
+in
+{
+  options.my.hardware.id-card = with lib; {
+    enable = mkEnableOption "german id card authentication";
+  };
+
+  config = lib.mkIf cfg.enable {
+    programs.ausweisapp = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}