about summary refs log tree commit diff
path: root/modules/workstation/hardware/yubikey/default.nix
blob: d047246bb20dcc7aa6f543bb91d7b05288c70906 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
{ pkgs, ... }:

{
  services.udev.packages = with pkgs; [ yubikey-personalization ];

  security.pam.services.sudo.u2fAuth = true;
  security.sudo.extraConfig = ''
    Defaults timestamp_timeout=0
  '';

  security.pam.u2f.cue = true;
  security.pam.u2f.authFile = pkgs.copyPathToStore ./u2f_keys;
}