Update

hosts/laptop/variables.nix

@@ -27,6 +27,7 @@
     # change the nvim's obsidian configuration if you want to enable that:
     obsidian = true;
     tailscale = true;
+    usbguard = false;
 
     theme = import ../themes/nixy.nix; # select your theme here
   };

hosts/modules/usb.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, config, ... }:
 
 {
   # USB Automounting
@@ -7,16 +7,14 @@
   # services.devmon.enable = true;
 
   # Enable USB Guard
-  # services.usbguard = {
-  #   enable = true;
-  #   dbus.enable = true;
-  #   implicitPolicyTarget = "block";
-  #   # FIXME: set yours pref USB devices (change {id} to your trusted USB device), use `lsusb` command (from usbutils package) to get list of all connected USB devices including integrated devices like camera, bluetooth, wifi, etc. with their IDs or just disable `usbguard`
-  #   rules = ''
-  #     allow id {id} # device 1
-  #     allow id {id} # device 2
-  #   '';
-  # };
+  services.usbguard = {
+    enable = config.var.usbguard;
+    dbus.enable = true;
+    implicitPolicyTarget = "block";
+    # FIXME: set yours pref USB devices (change {id} to your trusted USB device), use `lsusb` command (from usbutils package) to get list of all connected USB devices including integrated devices like camera, bluetooth, wifi, etc. with their IDs or just disable `usbguard`
+    # allow id {id} # device 1...
+    rules = "";
+  };
 
   # Enable USB-specific packages
   environment.systemPackages = with pkgs; [ usbutils ];