51 lines
946 B
Nix
51 lines
946 B
Nix
|
{ config, pkgs, ... }: {
|
||
|
|
home-manager.users.balsoft = {
|
||
|
|
home.activation.yubi = {
|
||
|
|
data = ''
|
||
|
|
mkdir -p .config/Yubico
|
||
|
|
[ -f /home/balsoft/.config/Yubico/u2f_keys ] || (pamu2fcfg > /home/balsoft/.config/Yubico/u2f_keys)
|
||
|
|
'';
|
||
|
|
after = [ "linkGeneration" ];
|
||
|
|
before = [ ];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
persist.state.directories = [ "/home/balsoft/.config/Yubico" ];
|
||
|
|
|
||
|
|
security.pam.services = builtins.listToAttrs (builtins.map (name: {
|
||
|
|
inherit name;
|
||
|
|
value = { unixAuth = false; };
|
||
|
|
}) [
|
||
|
|
"chpasswd"
|
||
|
|
"chsh"
|
||
|
|
"groupadd"
|
||
|
|
"groupdel"
|
||
|
|
"groupmems"
|
||
|
|
"groupmod"
|
||
|
|
"i3lock"
|
||
|
|
"i3lock-color"
|
||
|
|
"login"
|
||
|
|
"passwd"
|
||
|
|
"polkit-1"
|
||
|
|
"runuser"
|
||
|
|
"runuser-l"
|
||
|
|
"su"
|
||
|
|
"sudo"
|
||
|
|
"swaylock"
|
||
|
|
"systemd-user"
|
||
|
|
"useradd"
|
||
|
|
"userdel"
|
||
|
|
"usermod"
|
||
|
|
"vlock"
|
||
|
|
"xlock"
|
||
|
|
"xscreensaver"
|
||
|
|
]);
|
||
|
|
|
||
|
|
security.pam.u2f = {
|
||
|
|
control = "sufficient";
|
||
|
|
cue = true;
|
||
|
|
enable = true;
|
||
|
|
};
|
||
|
|
|
||
|
|
}
|