Port some stuff from 0x00 repo.

[MarigoldOS/.git] / profiles / u2f.nix

diff --git a/profiles/u2f.nix b/profiles/u2f.nix
new file mode 100644 (file)
index 0000000..aade5aa
--- /dev/null
+++ b/profiles/u2f.nix
@@ -0,0 +1,19 @@
+{ ... }:
+{
+   security.pam = {
+     u2f = {
+       enable = true;
+       cue = true;
+       # interactive = true;
+       control = "sufficient";
+       # appId = "pam://${config.networking.fqdn}";
+     };
+     services = {
+       login.u2fAuth = true;
+       sudo.u2fAuth = true;
+       kde.u2fAuth = true;
+       kdewallet.u2fAuth = true;
+       sddm.u2fAuth = true;
+     };
+   };
+}