nixos-configuration/hosts/pi4/security/default.nix

{
  imports = [
    ./firewall.nix
  ];

  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
  };
  services = {
    pcscd.enable = true;
    gnome.gnome-keyring.enable = true;
  };
}