add more u2f auth

This commit is contained in:
陈浩南 2023-06-29 22:03:24 +08:00
parent 3ab06acd09
commit 4ff7edff0d

View File

@ -41,7 +41,8 @@
security.pam =
{
u2f = { enable = true; cue = true; authFile = inputs.config.sops.secrets."u2f".path; };
services = { login.u2fAuth = true; sudo.u2fAuth = true; };
services = builtins.listToAttrs (builtins.map (name: { inherit name; value = { u2fAuth = true; }; })
[ "login" "sudo" "su" "kde" "polkit-1" ]);
};
sops.secrets.u2f.neededForUsers = true;
systemd.nspawn.arch =