srx-platform-nix/modules/hardware/security/yubikey.nix
Sebastian Wendel b910dc465e first commit
2024-07-04 13:47:18 +02:00

24 lines
514 B
Nix

{ pkgs, config, lib, ... }:
{
environment.systemPackages = with pkgs; [
yubikey-personalization
] ++ lib.optionals config.services.xserver.enable [
yubikey-manager-qt
yubikey-personalization-gui
];
security.pam.yubico = {
enable = lib.mkDefault true;
mode = "challenge-response";
};
services = {
pcscd.enable = lib.mkDefault true;
yubikey-agent.enable = lib.mkDefault true;
udev.packages = with pkgs; [
libu2f-host
yubikey-personalization
];
};
}