Initial commit

2025-07-11 18:08:12 +03:00
commit 74c6a29a13
478 changed files with 23775 additions and 0 deletions
--- a/nixos/yubikey.nix
+++ b/nixos/yubikey.nix
@@ -0,0 +1,24 @@
+{ pkgs, ...}:
+
+{
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+
+  programs.ssh.startAgent = true;
+
+  # FIXME Don't forget to create an authorization mapping file for your user (https://nixos.wiki/wiki/Yubikey#pam_u2f)
+  security.pam.u2f = {
+    enable = true;
+    settings.cue = true;
+    control = "sufficient";
+  };
+
+  security.pam.services = {
+    greetd.u2fAuth = true;
+    sudo-rs.u2fAuth = true;
+    hyprlock.u2fAuth = true;
+  };
+
+  environment.systemPackages = with pkgs; [
+    yubikey-manager
+  ];
+}