From ef197c613687bce6abc2a85aeab534d629eb66ff Mon Sep 17 00:00:00 2001
From: Dmitriy Pleshevskiy <dmitriy@pleshevski.ru>
Date: Wed, 22 May 2024 15:57:43 +0300
Subject: [PATCH] modules/yubikey: add cue to all hosts with yubikey

---
 hosts/home/configuration.nix      | 1 -
 modules/nixos/configs/yubikey.nix | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/home/configuration.nix b/hosts/home/configuration.nix
index e9661b8..039cd89 100644
--- a/hosts/home/configuration.nix
+++ b/hosts/home/configuration.nix
@@ -7,7 +7,6 @@
     ./users
   ];
 
-  security.pam.u2f.cue = true;
   local.yubikey.enable = true;
 
   ################################################################################
diff --git a/modules/nixos/configs/yubikey.nix b/modules/nixos/configs/yubikey.nix
index 3e76638..b0ae12e 100644
--- a/modules/nixos/configs/yubikey.nix
+++ b/modules/nixos/configs/yubikey.nix
@@ -12,6 +12,7 @@ let cfg = config.local.yubikey; in
     security.pam.u2f = {
       enable = true;
       control = "required";
+      cue = lib.mkDefault true;
     };
 
     services.udev.packages = [ pkgs.yubikey-personalization ];