sys/security/pam/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

{config, ...}: {
  security.pam = {
    services = {
      swaylock = {};
      sudo = {
        u2fAuth = true;
      };
      login = {
        u2fAuth = true;
      };
    };
    u2f = {
      enable = true;
      cue = true;
      authFile = config.age.secrets.pamu2f-mappings.path;
    };
  };
}