nitrokey: Init

modules/default.nix

@@ -38,6 +38,7 @@
     ./network-manager.nix
     ./nginx-interactive-index
     ./nginx.nix
+    ./nitrokey.nix
     ./nix.nix
     ./office.nix
     ./pipewire.nix

modules/nitrokey.nix

@@ -0,0 +1,12 @@
+{ config, lib, pkgs, ... }:
+
+{
+  hardware.nitrokey.enable = true;
+} // (lib.mkIf config.sbruder.gui.enable {
+  environment.systemPackages = with pkgs; [
+    # both depend on pypemicro, which is not needed, but nixpkgs requires it
+    # (even though it could have been optional: https://github.com/NixOS/nixpkgs/pull/183099#discussion_r933226708)
+    #nitrokey-app2
+    #pynitrokey
+  ];
+})

modules/unfree.nix

@@ -30,6 +30,11 @@ in
         "makemkv" # exception: runs in sandbox, only way to get DRM garbage to work properly
         "p7zip" # exception: rar source code is not free, but available; p7zip with `enableUnfree` includes it
 
+        # exception: used for programming the NitroKey,
+        # available under essentially a 3-BSD license with two additional restrictions:
+        # one usage restriction and one (pointless as the source is available) reverse engineering restriction
+        "nrfutil"
+
         # games (okay if they run sandboxed)
         "osu-lazer" # also is free except for one dependency
         "steam"