system/modules/nixos/configs/lockscreen/i3lock.nix

{ config, lib, ... }:

let
  cfg = config.local.lockscreen.i3lock;
in
{
  options.local.lockscreen.i3lock = with lib; {
    enable = mkEnableOption "i3lock";
  };

  config = lib.mkIf cfg.enable {
    programs.i3lock = {
      enable = true;
      u2fSupport = lib.mkDefault config.security.pam.u2f.enable;
    };

    programs.xss-lock.enable = true;
  };
}