From 35490e2116badf5042dc1e7dae4d83cdc39ea025 Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Wed, 15 Jan 2020 21:29:01 +1300
Subject: [PATCH] yubikey: add u2f for sudo

---
 system/desktop/yubikey.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/system/desktop/yubikey.nix b/system/desktop/yubikey.nix
index 1537419..259d7a5 100644
--- a/system/desktop/yubikey.nix
+++ b/system/desktop/yubikey.nix
@@ -2,6 +2,7 @@
 # * https://github.com/drduh/YubiKey-Guide
 # * https://nixos.wiki/wiki/Yubikey
 { pkgs, ... }: {
+
   services.pcscd.enable = true;
   services.udev.packages = [
 
@@ -46,4 +47,8 @@
     };
   };
 
+  # use for pam (sudo)
+  # --------------------------
+  security.pam.u2f.enable = true;
+  security.pam.u2f.authFile = toString <desktop_secrets/yubikey/u2fAuthFile>;
 }