From 1914ee39fd6c0273521ade03fbdf561d9a1aa7e6 Mon Sep 17 00:00:00 2001
From: Kyle Isom <kyle@imap.cc>
Date: Thu, 26 Mar 2026 12:54:42 -0700
Subject: [PATCH] Add plugdev group for FIDO2 device access.

The u2f udev rules set GROUP=plugdev on hidraw devices, but the
group didn't exist. Create it and add kyle to it so FIDO2 keys
are accessible without relying on logind uaccess ACLs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 configuration.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configuration.nix b/configuration.nix
index 58820cc..0e645a2 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -75,6 +75,7 @@
   services.cron.enable = true;
 
   programs.zsh.enable = true;
+  users.groups.plugdev = {};
   users.mutableUsers = true;
   users.users.kyle = {
     initialPassword = "password";
@@ -88,6 +89,7 @@
       "disk"
       "kvm"
       "networkmanager"
+      "plugdev"
       "video"
     ];
     shell = pkgs.zsh;