X-Git-Url: https://git.kernelpanic.cafe/?p=MarigoldOS%2F.git;a=blobdiff_plain;f=profiles%2Fu2f.nix;fp=profiles%2Fu2f.nix;h=aade5aad5c784e87171a0203c8b8b289a0aee9fa;hp=0000000000000000000000000000000000000000;hb=5be69113d25ab18f3381be6cc38f60bef8b687b2;hpb=754832f815bda4c941af3e7d27a5886a17dc6043

diff --git a/profiles/u2f.nix b/profiles/u2f.nix
new file mode 100644
index 0000000..aade5aa
--- /dev/null
+++ b/profiles/u2f.nix
@@ -0,0 +1,19 @@
+{ ... }:
+{
+   security.pam = {
+     u2f = {
+       enable = true;
+       cue = true;
+       # interactive = true;
+       control = "sufficient";
+       # appId = "pam://${config.networking.fqdn}";
+     };
+     services = {
+       login.u2fAuth = true;
+       sudo.u2fAuth = true;
+       kde.u2fAuth = true;
+       kdewallet.u2fAuth = true;
+       sddm.u2fAuth = true;
+     };
+   };
+}