nix/nixos/common/modules/yubikey-auth.nix

17 lines
379 B
Nix
Raw Normal View History

2024-05-05 15:08:06 +09:00
{ pkgs, ... }: {
2024-05-05 15:07:33 +09:00
security.pam.yubico = {
enable = true;
debug = true;
mode = "challenge-response";
id = [ "18550256" ];
};
services.udev.extraRules = ''
ACTION=="remove",\
ENV{ID_BUS}=="usb",\
ENV{ID_MODEL_ID}=="0407",\
ENV{ID_VENDOR_ID}=="1050",\
ENV{ID_VENDOR}=="Yubico",\
RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
'';
}