hardware/id-card: init

modules/hardware/default.nix

@@ -7,9 +7,10 @@
     ./drive-monitor
     ./firmware
     ./graphics
+    ./id-card
     ./keychron
-    ./yubikey
     ./sound
     ./thunderbolt
+    ./yubikey
   ];
 }

modules/hardware/id-card/default.nix

@@ -0,0 +1,16 @@
+{ config, lib, ... }:
+let
+  cfg = config.my.hardware.id-card;
+in
+{
+  options.my.hardware.id-card = with lib; {
+    enable = mkEnableOption "german id card authentication";
+  };
+
+  config = lib.mkIf cfg.enable {
+    programs.ausweisapp = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}