modules/yubikey: change u2f control to required
This commit is contained in:
parent
5729ec0922
commit
b0ff050687
1 changed files with 5 additions and 0 deletions
|
@ -9,6 +9,11 @@ let cfg = config.local.yubikey; in
|
|||
config = lib.mkIf cfg.enable {
|
||||
environment.systemPackages = [ pkgs.yubikey-manager pkgs.yubikey-personalization ];
|
||||
|
||||
security.pam.u2f = {
|
||||
enable = true;
|
||||
control = "required";
|
||||
};
|
||||
|
||||
services.udev.packages = [ pkgs.yubikey-personalization ];
|
||||
security.pam.services = {
|
||||
login.u2fAuth = true;
|
||||
|
|
Loading…
Reference in a new issue