ssh stuff, pam u2f, fixing touchpad tapping on mbp

common.nix

@@ -156,6 +156,9 @@ with builtins; {
     packages = [
       pkgs.marksman
     ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOaE8TFsIazpn4OnHvHcRpOFr9FfvMaWOiEjmHsmnAoE cardno:000F_70CD7D05"
+    ];
   };
 
   zramSwap = {

hosts/catbook-j/configuration.nix

@@ -55,7 +55,13 @@
 
   services.xserver.libinput.touchpad.tapping = false;
 
-  environment.systemPackages = [pkgs.plantuml pkgs.mqttui pkgs.mobile-broadband-provider-info pkgs.modem-manager-gui pkgs.wireshark];
+  environment.systemPackages = [
+    pkgs.plantuml
+    pkgs.mqttui
+    pkgs.mobile-broadband-provider-info
+    pkgs.modem-manager-gui
+    pkgs.wireshark
+  ];
 
   # Bootloader.
   boot.loader.systemd-boot.enable = true;

hosts/potatobook-g/configuration.nix

@@ -66,6 +66,7 @@
   boot.loader.efi.canTouchEfiVariables = true;
 
   services.xserver.libinput.touchpad.disableWhileTyping = true;
+  services.xserver.libinput.touchpad.tapping = false;
 
   networking.networkmanager.enable = true;
 
@@ -115,8 +116,17 @@
   services.gnome.gnome-keyring.enable = true;
   programs.seahorse.enable = true;
   security.pam.services.jade.enableGnomeKeyring = true;
+  security.pam.services.jade.u2fAuth = true;
 
   systemd.services."NetworkManager-wait-online".enable = false;
+  programs.i3lock.u2fSupport = true;
+
+  security.pam.u2f = {
+    enable = true;
+    cue = true;
+    control = "sufficient";
+    authFile = "/home/jade/.ssh/u2f_keys";
+  };
 
   # services.pixiecore =
   #   let

other/scripts/dispatcher.nu

@@ -13,7 +13,7 @@ def main [
 
   systemd-cat echo $"($currentnet) \(($interface)): ($type)";
 
-  if $interface == 'wlp2s0' {
+  if $interface starts-with 'wlp' {
     ^$"/etc/networkhooks/($currentnet).nu" $interface $type
   }
 }