tomate: enable login per u2f

2023-12-12 18:12:39 +01:00 · 2023-12-12 18:12:39 +01:00 · 63551dd42a
parent 0809f266fc
commit 63551dd42a
1 changed files with 12 additions and 0 deletions
--- a/hosts/tomate/configuration.nix
+++ b/hosts/tomate/configuration.nix
@ -110,6 +110,18 @@
    #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
    #  wget
  ];
+  security = {
+    pam = {
+      u2f = {
+        enable = true;
+      };
+      services = {
+        login.u2fAuth = true;
+        sudo.u2fAuth = true;
+      };
+    };
+
+  };

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.