add intial nipr setup

provision/additional-setup.md

@@ -22,6 +22,14 @@ or `/run/secrets/keys/github_personal` to `~/.ssh/keys/github_personal`.
 Encrypted keys for various aspects of the config are stored in `./secrets/secrets.yaml` 
 to the required key for decryption must be placed at `~/.config/sops/age/keys.txt`.
 
+### NIPR email, Teams, etc.
+
+
+
+[Teams](https://dod.teams.microsoft.us)
+[Outlook](https://webmail.apps.mil/owa)
+[OneDrive](https://usaf-my.dps.mil)
+
 ## Wireguard Client
 
 Wireguard is nice for a home vpn. NixOS setus up all of the configurations for 

provision/hosts/bulwark/configuration.nix

@@ -98,6 +98,7 @@
       virt-manager.enable = false;
     };
     system = {
+      nipr.enable = true;
       ssh.enable = true;
       terminal.enable = true;
       secrets.enable = true;

provision/hosts/kestrel/configuration.nix

@@ -101,6 +101,7 @@
       virt-manager.enable = true;
     };
     system = {
+      nipr.enable = true;
       secrets.enable = true;
       ssh.enable = true;
       terminal.enable = true;

provision/modules/system/default.nix

@@ -1,4 +1,4 @@
 { ... }:
 {
-  imports = [ ./secrets.nix ./ssh.nix ./backup.nix ./terminal.nix ./wireguard-client.nix ];
+  imports = [ ./nipr.nix ./secrets.nix ./ssh.nix ./backup.nix ./terminal.nix ./wireguard-client.nix ];
 }

provision/modules/system/nipr.nix

@@ -0,0 +1,15 @@
+{ config, lib, pkgs, user, ... }:
+
+let cfg = config.modules.system.nipr;
+in {
+  options.modules.system.nipr.enable = lib.mkEnableOption "nipr";
+  config = lib.mkIf cfg.enable {
+
+    environment.systemPackages = with pkgs; [
+      opensc
+      pcsc-tools
+      pkcs11helper
+      firefox
+    ];
+  };
+}

provision/modules/system/terminal.nix

@@ -39,6 +39,10 @@ in {
       timewarrior # Command-line time tracking utility.
       ollama # Command-line tool for viewing and managing Open Location Codes.
       docker-compose
+      opensc
+      pcsc-tools
+      firefox
+      pkcs11helper
     ];
   };
 }