enable FIDO2/U2F PAM authentication

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 00:04:51 -07:00
parent d1aee2f30e
commit 59fd091632
2 changed files with 6 additions and 0 deletions
--- a/configs/pkgs.nix
+++ b/configs/pkgs.nix
@@ -49,6 +49,7 @@
    ntp
    offpunk
    openssl
+    pam_u2f
    ops
    pandoc
    pciutils
--- a/configuration.nix
+++ b/configuration.nix
@@ -125,6 +125,11 @@
  services.tailscale.enable = true;
  services.syncthing.enable = true;

+  security.pam.u2f = {
+    enable = true;
+    settings.cue = true;
+  };
+
  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;