diff options
Diffstat (limited to 'modules/workstation/hardware/yubikey/default.nix')
| -rw-r--r-- | modules/workstation/hardware/yubikey/default.nix | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/modules/workstation/hardware/yubikey/default.nix b/modules/workstation/hardware/yubikey/default.nix index 23a940f2ee8a..d047246bb20d 100644 --- a/modules/workstation/hardware/yubikey/default.nix +++ b/modules/workstation/hardware/yubikey/default.nix @@ -2,4 +2,12 @@ { services.udev.packages = with pkgs; [ yubikey-personalization ]; + + security.pam.services.sudo.u2fAuth = true; + security.sudo.extraConfig = '' + Defaults timestamp_timeout=0 + ''; + + security.pam.u2f.cue = true; + security.pam.u2f.authFile = pkgs.copyPathToStore ./u2f_keys; } |