mira/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added pam u2f auth

Browse source
This commit is contained in:
twoneis 2025-03-07 11:27:49 +01:00
parent 27dd02777d
commit 6f36d70cdf
3 changed files with 31 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

36
modules/yubikey/default.nix
View file

@ -4,19 +4,31 @@
pkgs,
...
}: let
inherit (lib) mkIf;
inherit (lib) mkMerge mkIf;
inherit (config) conf;
in
mkIf conf.yubikey.enable {
services.udev.packages = [pkgs.yubikey-personalization];
services.pcscd.enable = true;
mkMerge [
(mkIf
conf.yubikey.enable
{
services.udev.packages = [pkgs.yubikey-personalization];
services.pcscd.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
home-manager.users.${conf.username}.home.packages = with pkgs; [
yubioath-flutter
];
}
home-manager.users.${conf.username}.home.packages = with pkgs; [
yubioath-flutter
];
})
(mkIf
conf.yubikey.login
{
security.pam.services = {
login.u2fAuth = true;
sudo.u2fAuth = true;
};
})
]