caesium: accounts and yubikey

caesium.nixos.nix

@@ -4,6 +4,7 @@
   imports = [
     ./caesium.hardware.nix # Crucial: Imports your UUIDs
     ./module.firewall.nix
+    ./module.yubikey.nix
   ];
 
   time.timeZone = "America/New_York";
@@ -161,9 +162,25 @@
   services.displayManager.sddm.enable = true;
   services.desktopManager.plasma6.enable = true;
 
+  # Registers the evolution-data-server D-Bus services/systemd user units so
+  # GNOME Calendar, GNOME Contacts and Planify can share calendars/contacts
+  # (see module.evolution.nix). Deliberately NOT programs.evolution.enable,
+  # which force-enables services.gnome.gnome-keyring and would fight kwallet
+  # for ownership of org.freedesktop.secrets.
+  services.gnome.evolution-data-server.enable = true;
+
   # Tell SDDM to use Wayland for the login screen itself (Ultra Modern)
   services.displayManager.sddm.wayland.enable = true;
 
+  # GTK apps (Firefox, Thunderbird) read their theme through GtkSettings, which needs the
+  # org.gtk.Settings.* / org.gnome.desktop.interface GSettings schemas. Plasma is Qt-based so
+  # nothing pulls them into the system profile, and the Mozilla wrappers don't add them
+  # themselves — without this their chrome renders black.
+  environment.sessionVariables.XDG_DATA_DIRS = [
+    "${pkgs.gsettings-desktop-schemas}/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}"
+    "${pkgs.gtk3}/share/gsettings-schemas/${pkgs.gtk3.name}"
+  ];
+
   fonts.packages = with pkgs; [
     noto-fonts
     noto-fonts-cjk-sans
@@ -219,6 +236,7 @@
     python3
     nodejs_26
     home-manager
+    glib
   ];
 
   programs.appimage = {