From b40f1fc5fb3e48f255636e31543b9b09c32ebeba Mon Sep 17 00:00:00 2001
From: twoneis <git@chpu.eu>
Date: Fri, 7 Mar 2025 12:04:51 +0100
Subject: [PATCH] yubikey + password login

---
 modules/yubikey/default.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/modules/yubikey/default.nix b/modules/yubikey/default.nix
index d05aa1a..6e7d613 100644
--- a/modules/yubikey/default.nix
+++ b/modules/yubikey/default.nix
@@ -26,9 +26,10 @@ in
     (mkIf
       conf.yubikey.login
       {
-        security.pam.services = {
-          login.u2fAuth = true;
-          sudo.u2fAuth = true;
+        security.pam.u2f = {
+          enable = true;
+          cue = true;
+          control = "required";
         };
       })
   ]