rework and fix some hardware key stuff

This commit is contained in:
Schrottkatze 2024-08-01 08:17:09 +02:00
parent 2b13d1c0bb
commit b63db1934d
Signed by: schrottkatze
SSH key fingerprint: SHA256:hXb3t1vINBFCiDCmhRABHX5ocdbLiKyCdKI4HK2Rbbc
2 changed files with 34 additions and 18 deletions

View file

@ -19,6 +19,7 @@
./modules ./modules
]; ];
jade = { jade = {
hwKey.pamAuth.enable = true;
desktop = { desktop = {
dm.autoLogin = { dm.autoLogin = {
enable = true; enable = true;

View file

@ -1,4 +1,16 @@
{pkgs, ...}: { {
pkgs,
config,
lib,
...
}: let
cfg = config.jade.hwKey;
in
with lib; {
options.jade.hwKey = {
pamAuth.enable = mkEnableOption "Enable PAM authentication with hardware keys";
};
config = {
# nitrokey # nitrokey
services.udev.packages = [pkgs.nitrokey-udev-rules]; services.udev.packages = [pkgs.nitrokey-udev-rules];
@ -7,14 +19,17 @@
# authenticate using hw key # authenticate using hw key
security.pam = { security.pam = {
services.jade.u2fAuth = true; services.jade.u2fAuth = cfg.pamAuth.enable;
u2f = { u2f = {
enable = true; enable = true;
cue = true;
control = "sufficient"; control = "sufficient";
settings = {
cue = true;
authFile = "/home/jade/.ssh/u2f_keys"; authFile = "/home/jade/.ssh/u2f_keys";
}; };
}; };
};
programs.i3lock.u2fSupport = true; programs.i3lock.u2fSupport = true;
};
} }