30 lines
593 B
Nix
30 lines
593 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
let
|
|
cfg = config.personal.u2f;
|
|
in
|
|
{
|
|
options.personal.u2f = {
|
|
enable = mkEnableOption "Enable personal U2F login modules and stuff";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
environment.systemPackages = with pkgs; [
|
|
pam_u2f # for pamu2fcfg
|
|
];
|
|
security.pam = mkIf pkgs.stdenv.isLinux {
|
|
u2f = {
|
|
enable = true;
|
|
cue = true;
|
|
};
|
|
|
|
# Services
|
|
services.sudo.u2fAuth = false;
|
|
services.login.u2fAuth = true;
|
|
services.swaylock.u2fAuth = false;
|
|
services.sshd.u2fAuth = false;
|
|
};
|
|
};
|
|
}
|