The Complete Computer

udev makes the GPG keys owned by root in the most recent Fedoras for some reason; I have to install a udev rule to make sure they are properly owned.

yaml source: 
- name: yubikey udev rules in place
  lineinfile:
    create: yes
    dest: /etc/udev/rules.d/99-yubikeys.rules
    regexp: '0111'
    line: 'SUBSYSTEMS=="usb", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0111", OWNER="{{local_account}}"'
  tags:
  - yubikeys

- name: yubikey udev rules in place
  lineinfile:
    create: yes
    dest: /etc/udev/rules.d/99-yubikeys.rules
    regexp: '0407'
    line: 'SUBSYSTEMS=="usb", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0407", OWNER="{{local_account}}"'
  tags:
  - yubikeys

and in My NixOS configuration this is simple:

nix source: :tangle ~/arroyo-nix/nixos/yubikey.nix
{ pkgs, ... }:
{
  services.udev.packages = [ pkgs.yubikey-personalization ];
}