dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions 1

Switch to systemd stage 1

Browse source
This commit is contained in:
Tim Schubert 2023-10-08 12:14:51 +02:00
parent c09793669b
commit b4907407fc
Signed by: dadada
SSH key fingerprint: SHA256:bFAjFH3hR8zRBaJjzQDjc3o4jqoq5EZ87l+KXEjxIz0
4 changed files with 20 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

19
nixos/modules/yubikey.nix
View file

@ -24,21 +24,6 @@ in
};
config = mkIf yubikey.enable {
boot.initrd.luks = {
fido2Support = true;
devices = mkIf (yubikey.luksUuid != null) {
root = {
device = "/dev/disk/by-uuid/${yubikey.luksUuid}";
preLVM = true;
allowDiscards = true;
fido2 = mkIf (yubikey.fido2Credentials != [ ]) {
credentials = yubikey.fido2Credentials;
passwordLess = true;
};
};
};
};
security.pam = {
# Keys must be placed in $XDG_CONFIG_HOME/Yubico/u2f_keys
services = {
@ -56,8 +41,8 @@ in
services.udev.packages = [ pkgs.yubikey-personalization ];
environment.systemPackages = with pkgs; [
fido2luks
linuxPackages.acpi_call
#fido2luks
#linuxPackages.acpi_call
pam_u2f
pamtester
yubikey-manager