diff --git a/ops/nixos/nugget/default.nix b/ops/nixos/nugget/default.nix
index d4b5b6f7e..8e7c653c4 100644
--- a/ops/nixos/nugget/default.nix
+++ b/ops/nixos/nugget/default.nix
@@ -130,6 +130,8 @@ in pkgs.lib.fix(self: {
       unzip
       vlc
       xclip
+      yubico-piv-tool
+      yubikey-personalization
     ]);
 
     fileSystems = {
@@ -183,6 +185,12 @@ in pkgs.lib.fix(self: {
     services.openssh.enable = true;
     services.keybase.enable = true;
 
+    # Required for Yubikey usage as smartcard
+    services.pcscd.enable = true;
+    services.udev.packages = [
+      nixpkgs.yubikey-personalization
+    ];
+
     services.xserver = {
       enable = true;
       layout = "us";