mirror of
https://github.com/CHN-beta/nixos.git
synced 2024-10-23 22:28:55 +08:00
47 lines
1.4 KiB
Nix
47 lines
1.4 KiB
Nix
|
inputs:
|
||
|
|
{
|
||
|
|
config =
|
||
|
|
{
|
||
|
|
# allow non-root users to access intel gpu performance counters
|
||
|
|
boot.kernel.sysctl."dev.i915.perf_stream_paranoid" = false;
|
||
|
|
security.pam =
|
||
|
|
{
|
||
|
|
u2f =
|
||
|
|
{
|
||
|
|
enable = true;
|
||
|
|
cue = true;
|
||
|
|
appId = "pam://chn.moe";
|
||
|
|
origin = "pam://chn.moe";
|
||
|
|
# generate using: `pamu2fcfg -u chn -o pam://chn.moe -i pam://chn.moe`
|
||
|
|
authFile = inputs.pkgs.writeText "yubikey_mappings" (builtins.concatStringsSep "\n"
|
||
|
|
[
|
||
|
|
(builtins.concatStringsSep ":"
|
||
|
|
[
|
||
|
|
"chn"
|
||
|
|
(builtins.concatStringsSep ","
|
||
|
|
[
|
||
|
|
"83Y3cLxhcmwbDOH1h67SQ1xy0dFBcoKYM0VO/YVq+9lpOpdPdmFaB7BNngO3xCmAxJeO/Fg9jNmEF9vMJEmAaw=="
|
||
|
|
"9bSjr+12JVwtHlyoa70J7w3bEQff+MwLxg5elzdP1OGHcfWGkolRvS+luAgcWjKn1g0swaYdnklCYWYOoCAJbA=="
|
||
|
|
"es256"
|
||
|
|
"+presence"
|
||
|
|
])
|
||
|
|
(builtins.concatStringsSep ","
|
||
|
|
[
|
||
|
|
"WgLCnlQcGP4uVHI8OZrJWoLK6ezHtl404NVGsfH2LXsq0TNVZ7l2OidGpbYqIJwTn5yKu6t0MI7KdHYD18T/HA=="
|
||
|
|
"GVPuwp38yb+A1Uur22hywW7mQJPOxuLXXKLlM9FU2bvVhpwdjWDvg+BB5YFAL9NjTW22V7Hy/a9UuSmZejs7dw=="
|
||
|
|
"es256"
|
||
|
|
"+presence"
|
||
|
|
])
|
||
|
|
])
|
||
|
|
]);
|
||
|
|
};
|
||
|
|
yubico =
|
||
|
|
{
|
||
|
|
enable = true;
|
||
|
|
id = "91291";
|
||
|
|
authFile = inputs.pkgs.writeText "yubikey_mappings" "chn:cccccbgrhnub";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|