From 6a570131879d4f798946f3c6d109af26812e2f48 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Sun, 17 Dec 2023 17:27:14 +0100
Subject: [PATCH] security: enable u2f

---
 hosts/thinkpad/modules/security/default.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/hosts/thinkpad/modules/security/default.nix b/hosts/thinkpad/modules/security/default.nix
index 2823578..29e2fdf 100644
--- a/hosts/thinkpad/modules/security/default.nix
+++ b/hosts/thinkpad/modules/security/default.nix
@@ -9,6 +9,15 @@
       abrmd.enable = true;
       tctiEnvironment.enable = true;
     };
+    pam = {
+      u2f = {
+        enable = true;
+      };
+      services = {
+        login.u2fAuth = true;
+        sudo.u2fAuth = true;
+      };
+    };
   };
   services = {
     fprintd.enable = true; # log in using fingerprint