feat(puzzlevision): add zen browser and remove firefox

feat: implement super basic Yubikey configuration

flake.lock

@@ -152,6 +152,22 @@
         "type": "github"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1733759999,
+        "narHash": "sha256-463SNPWmz46iLzJKRzO3Q2b0Aurff3U1n0nYItxq7jU=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "a73246e2eef4c6ed172979932bc80e1404ba2d56",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "catppuccin": "catppuccin",
@@ -160,7 +176,8 @@
         "nix-flatpak": "nix-flatpak",
         "nixpkgs": "nixpkgs",
         "snowfall-lib": "snowfall-lib",
-        "sops-nix": "sops-nix"
+        "sops-nix": "sops-nix",
+        "zen-browser": "zen-browser"
       }
     },
     "snowfall-lib": {
@@ -220,6 +237,24 @@
         "repo": "default",
         "type": "github"
       }
+    },
+    "zen-browser": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1734038753,
+        "narHash": "sha256-v2NetNrFvObcTx5Gw0MV9leJQr0KfCLtbpC4gZaq+Tc=",
+        "owner": "0xc000022070",
+        "repo": "zen-browser-flake",
+        "rev": "b2a4aeaad1cdb4a0d8901313d6388a8b4bf2c59d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "0xc000022070",
+        "repo": "zen-browser-flake",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -37,6 +37,10 @@
     nix-flatpak = {
       url = "github:gmodena/nix-flatpak/?ref=v0.4.1";
     };
+
+    zen-browser = {
+      url = "github:0xc000022070/zen-browser-flake";
+    };
   };
 
   outputs = inputs:

homes/x86_64-linux/jo@puzzlevision/default.nix

@@ -12,6 +12,10 @@
 
   themes.catppuccin.gtk.enable = true;
 
+  home.file."~/.config/Yubico/u2f_keys".text = ''
+    jo:gtKwCQKVw5O4IkWg8J8o7vHIo3hStmOqVcnmk97E335DwHnPUMIDTMnD46qEn/1tucTZlYfGABfzVVG+iYeUOA==,fVRFZb9iBiqjOXvk5Gm9ygO/O4huEUR1Uq3DGBlnS1RtqqK0shif8aOlNLkmn8Xe9+x4HYIeNEX4fc8Z7Y2Hgw==,es256,+presence
+  '';
+
   # Flatpak configuration.
   services.flatpak = {
     enable = true;
@@ -44,6 +48,7 @@
     python39
     nil
     zed-editor
+    bruno
 
     ### Rust development specific
     rustup

modules/nixos/security/yubikey/default.nix

@@ -21,7 +21,7 @@ in
 
   config = mkIf cfg.enable {
     environment.systemPackages = with pkgs; [ yubikey-manager yubioath-flutter ];
-    
+
     services.udev.packages = [ pkgs.yubikey-personalization ];
     services.pcscd.enable = true;
 
@@ -30,11 +30,9 @@ in
       enableSSHSupport = true;
     };
 
-    security.pam.yubico = {
-      enable = true;
-      debug = false;
-      mode = "challenge-response";
-      id = cfg.key-id;
+    security.pam.services = {
+      login.u2fAuth = true;
+      sudo.u2fAuth = true;
     };
   };
 }

systems/x86_64-linux/puzzlevision/default.nix

@@ -4,6 +4,7 @@
   inputs,
   namespace,
   config,
+  system,
   ...
 }: with lib; with lib.${namespace};
 {
@@ -72,8 +73,8 @@
   environment.systemPackages = with pkgs; [
     ### General
     nano
-    firefox
     chromium
+    inputs.zen-browser.packages."${system}".specific
     vlc
     spotify