Commit bb31bf95aac5
Changed files (2)
machine
profiles
machine/wakasu.nix
@@ -6,7 +6,7 @@
../hardware-configuration.nix
../profiles/laptop.nix
../profiles/ssh.nix
- # ../profiles/virtualization.nix
+ ../profiles/yubikey.nix
../profiles/dockerization.nix
../profiles/dev.go.nix
../profiles/dev.python.nix
profiles/yubikey.nix
@@ -1,23 +1,15 @@
{ config, pkgs, ... }:
{
- security = {
- pam.enableU2F = true;
- pam.services.vincent.u2fAuth = true;
- sudo.enable = true;
- # sudo.wheelNeedsPassworld = true;
- };
-
- services.pcscd.enable = true;
-
- #services.udev.extraRules = ''
+ services.udev.extraRules = ''
# Yubico YubiKey
- #KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120|0402|0403|0406|0407|0410", TAG+="uaccess"
- #ACTION=="remove", ENV{ID_VENDOR_ID}=="1050", ENV{ID_MODEL_ID}=="0113|0114|0115|0116|0120|0402|0403|0406|0407|0410", RUN+="/run/current-system/sw/bin/loginctl lock-sessions"
-#'';
- environment = {
- systemPackages = with pkgs; [
- yubico-piv-tool
- ];
- };
+ KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120|0402|0403|0406|0407|0410", TAG+="uaccess", MODE="0660", GROUP="wheel"
+ # ACTION=="remove", ENV{ID_VENDOR_ID}=="1050", ENV{ID_MODEL_ID}=="0113|0114|0115|0116|0120|0402|0403|0406|0407|0410", RUN+="${pkgs.systemd}/bin/loginctl lock-sessions"
+ '';
+
+ environment = {
+ systemPackages = with pkgs; [
+ yubico-piv-tool
+ ];
+ };
}