AusweisApp

To authenticate online with the German Personalausweis, the AusweisApp desktop app can be used. To interface with the Personalausweis (scanning&entering PIN), one can either use the mobile AusweisApp, which communicates via same WiFi network with the desktop app, or a dedicated USB device.

Using a Smartphone

{ pkgs, lib, ... }: {
  # add AusweisApp desktop app
  programs.ausweisapp.enable = true;
  # open firewall for communication with smartphone app
  programs.ausweisapp.openFirewall = true;
}

Using a USB Card Reader

The following config can be used to work with a ReinerSCT cyberJack RFID standard . If you have another one, search if there is a driver in nixpkgs and add it to services.pcscd.plugins instead.

{ pkgs, lib, ... }: {
  # add AusweisApp desktop app
  programs.ausweisapp.enable = true;
  # enable smart card daemon with needed plugin
  services.pcscd.enable = true;
  services.pcscd.plugins = with pkgs; [ pcsc-cyberjack ];
}