diff --git a/hosts/astyanax/default.nix b/hosts/astyanax/default.nix
index 4a1e8fdc..85202aad 100644
--- a/hosts/astyanax/default.nix
+++ b/hosts/astyanax/default.nix
@@ -105,6 +105,25 @@ in
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
 
+  my.yubikey = {
+    enable = true;
+    # inherit (config.host) username;
+    # keys = [
+    #   {
+    #     handle = "<KeyHandle1>";
+    #     userKey = "<UserKey1>";
+    #     coseType = "<CoseType1>";
+    #     options = "<Options1>";
+    #   }
+    #   {
+    #     handle = "<KeyHandle2>";
+    #     userKey = "<UserKey2>";
+    #     coseType = "<CoseType2>";
+    #     options = "<Options2>";
+    #   }
+    # ];
+  };
+
   services = {
     fwupd.enable = true;
     locate = {
diff --git a/modules/yubikey/default.nix b/modules/yubikey/default.nix
index e9226909..0a305fe8 100644
--- a/modules/yubikey/default.nix
+++ b/modules/yubikey/default.nix
@@ -70,6 +70,6 @@ in
       };
     };
 
-    services.udev.packages = [ pkgs.yubikey-personalization ];
+    services.udev.packages = with pkgs; [ yubikey-personalization ];
   };
 }