tomate: enable login per u2f

fsr · Dec 12, 2023 · 63551dd · 63551dd
1 parent 0809f26
commit 63551dd
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/hosts/tomate/configuration.nix b/hosts/tomate/configuration.nix
@@ -110,6 +110,18 @@
     #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
     #  wget
   ];
+  security = {
+    pam = {
+      u2f = {
+        enable = true;
+      };
+      services = {
+        login.u2fAuth = true;
+        sudo.u2fAuth = true;
+      };
+    };
+
+  };
 
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.