feat: adds yubikey stuff

This commit is contained in:
Ahwx 2024-06-21 20:43:12 +02:00
parent 3fa04535cf
commit dbb62c0555
2 changed files with 38 additions and 12 deletions

View file

@ -1,17 +1,18 @@
{ ... }: { ... }:
{ {
imports = imports =
[ (import ./bootloader.nix) ] [(import ./bootloader.nix)]
++ [ (import ./hardware.nix) ] ++ [(import ./hardware.nix)]
++ [ (import ./xserver.nix) ] ++ [(import ./xserver.nix)]
++ [ (import ./network.nix) ] ++ [(import ./network.nix)]
++ [ (import ./pipewire.nix) ] ++ [(import ./pipewire.nix)]
++ [ (import ./program.nix) ] ++ [(import ./program.nix)]
++ [ (import ./security.nix) ] ++ [(import ./security.nix)]
++ [ (import ./services.nix) ] ++ [(import ./services.nix)]
++ [ (import ./system.nix) ] ++ [(import ./system.nix)]
++ [ (import ./user.nix) ] ++ [(import ./user.nix)]
++ [ (import ./bluetooth.nix) ] ++ [(import ./bluetooth.nix)]
++ [ (import ./wayland.nix) ]; ++ [(import ./yubikey.nix)]
++ [(import ./wayland.nix)];
# ++ [ (import ./virtualization.nix) ]; # ++ [ (import ./virtualization.nix) ];
} }

25
modules/core/yubikey.nix Normal file
View file

@ -0,0 +1,25 @@
{ pkgs, ...}:
{
services.udev.packages = [ pkgs.yubikey-personalization ];
# FIXME Don't forget to create an authorization mapping file for your user (https://nixos.wiki/wiki/Yubikey#pam_u2f)
security.pam = {
u2f = {
enable = true;
cue = true;
control = "sufficient";
};
services = {
login.u2fAuth = true;
greetd.u2fAuth = true;
sudo.u2fAuth = true;
hyprlock.u2fAuth = true;
};
};
environment.systemPackages = with pkgs; [
yubikey-manager
];
}