nix-configs/modules/hardware/hardware_key.nix

36 lines
726 B
Nix
Raw Normal View History

2024-08-01 06:17:09 +00:00
{
pkgs,
config,
lib,
...
}: let
cfg = config.jade.hwKey;
in
with lib; {
options.jade.hwKey = {
pamAuth.enable = mkEnableOption "Enable PAM authentication with hardware keys";
};
config = {
# nitrokey
services.udev.packages = [pkgs.nitrokey-udev-rules];
2024-08-01 06:17:09 +00:00
# smartcard daemon
services.pcscd.enable = true;
2024-08-01 06:17:09 +00:00
# authenticate using hw key
security.pam = {
services.jade.u2fAuth = cfg.pamAuth.enable;
u2f = {
enable = true;
control = "sufficient";
settings = {
cue = true;
authFile = "/home/jade/.ssh/u2f_keys";
};
};
};
2024-08-01 06:17:09 +00:00
programs.i3lock.u2fSupport = true;
};
}