vbrandl/nixos-configuration
1
0
Fork 0
Code Issues 1 Pull Requests 2 Releases Wiki Activity

Add yubikey configuration

Browse Source
This commit is contained in:
Valentin Brandl 2022-10-09 12:19:48 +02:00
parent b3991af3f7
commit ea034d4e52
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
machines/common.nix
View File

@ -52,9 +52,11 @@ inputs:
}; };
services = { services = {
# yubikey smartcard mode
pcscd.enable = true;
dbus.packages = with pkgs; [ gcr ]; dbus.packages = with pkgs; [ gcr ];
# for u2f stick # for u2f stick and yubikey
udev.packages = with pkgs; [ libu2f-host ]; udev.packages = with pkgs; [ libu2f-host yubikey-personalization ];
davfs2.enable = true; davfs2.enable = true;
unbound.enable = true; unbound.enable = true;
udisks2.enable = true; udisks2.enable = true;
@ -117,6 +119,11 @@ inputs:
xfce.thunar xfce.thunar
xfce.thunar-volman xfce.thunar-volman
gvfs gvfs
# yubikey packages
yubikey-manager-qt
yubikey-personalization-gui
yubioath-desktop
]; ];
virtualisation = { virtualisation = {
@ -171,4 +178,12 @@ inputs:
}; };
}; };
}; };
# generate login settings
# ykman otp chalresp --touch --generate 2
security.pam.yubico = {
enable = true;
# debug = true;
mode = "challenge-response";
};
} }