andy/linux-nixos-hyprland-config-dotfiles
Template
1
0
Fork 0
mirror of https://github.com/XNM1/linux-nixos-hyprland-config-dotfiles.git synced 2025-09-15 09:45:58 +03:00
Code Activity

yubikey.nix update

Browse Source
This commit is contained in:
xnm
2024-02-06 22:40:34 +02:00
parent 03c7257b8b
commit cdb53c16e7
5 changed files with 11 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
nixos/yubikey.nix
View File

@@ -8,20 +8,17 @@
enableSSHSupport = true;
};
security.pam.services = {
login.u2fAuth = true;
sudo.u2fAuth = true;
security.pam.u2f = {
enable = true;
cue = true;
control = "sufficient";
};
# FIXME Replace [your_yubikey_model_id] with the actual model ID of your YubiKey. You can find the model ID using the `lsusb` command, typically available as a part of the `usbutils` package
services.udev.extraRules = ''
ACTION=="remove",\
ENV{ID_BUS}=="usb",\
ENV{ID_MODEL_ID}=="your_yubikey_model_id",\
ENV{ID_VENDOR_ID}=="1050",\
ENV{ID_VENDOR}=="Yubico",\
RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
'';
security.pam.services = {
greetd.u2fAuth = true;
sudo.u2fAuth = true;
swaylock.u2fAuth = true;
};
# FIXME Don't forget to create an authorization mapping file for your user (https://nixos.wiki/wiki/Yubikey#pam_u2f)
environment.systemPackages = with pkgs; [