summary refs log tree commit diff stats
path: root/sys/security
diff options
context:
space:
mode:
authorsils <sils@sils.li>2024-02-02 22:29:54 +0100
committersils <sils@sils.li>2024-02-02 22:29:54 +0100
commit8892831a0fa767edc842bd56a240ee2035258f81 (patch)
treee33fd11dd04ea4f41a8b26e7be065e1e921bd517 /sys/security
parentflake.lock: update (diff)
downloadnix-config-8892831a0fa767edc842bd56a240ee2035258f81.tar.gz
nix-config-8892831a0fa767edc842bd56a240ee2035258f81.zip
remove nix-filter input override for prismlauncher
Diffstat (limited to '')
-rw-r--r--sys/security/pam/default.nix19
1 files changed, 17 insertions, 2 deletions
diff --git a/sys/security/pam/default.nix b/sys/security/pam/default.nix
index eef9213..ee0d843 100644
--- a/sys/security/pam/default.nix
+++ b/sys/security/pam/default.nix
@@ -1,3 +1,18 @@
-{...}: {
-  security.pam.services.swaylock = {};
+{config, ...}: {
+  security.pam = {
+    services = {
+      swaylock = {};
+      sudo = {
+        u2fAuth = true;
+      };
+      login = {
+        u2fAuth = true;
+      };
+    };
+    u2f = {
+      enable = true;
+      cue = true;
+      authFile = config.age.secrets.pamu2f-mappings.path;
+    };
+  };
 }