diff --git a/hosts/norman/configuration.nix b/hosts/norman/configuration.nix
index b4b6f413..9e9daa1e 100644
--- a/hosts/norman/configuration.nix
+++ b/hosts/norman/configuration.nix
@@ -27,6 +27,13 @@
     ]; # Clients and peers can use the same port, see listenport
   };
 
+  hardware.nitrokey.enable = true;
+
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = true;
+  };
+
   services.tlp = {
     enable = true;
     settings = {