From 3e676dea9fa92b0d95bba380f36a47615b54e088 Mon Sep 17 00:00:00 2001
From: larszauberer <wasser.ian@gmail.com>
Date: Fri, 19 Apr 2024 08:30:39 +0200
Subject: [PATCH] Added yubikey auth

---
 hosts/lars/default.nix | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/hosts/lars/default.nix b/hosts/lars/default.nix
index 74e0106..eda91a3 100644
--- a/hosts/lars/default.nix
+++ b/hosts/lars/default.nix
@@ -120,17 +120,20 @@
   services = {
       twingate.enable = true;
       pcscd.enable = true;
-      # pam.yubico = { # login
-      #     enable = true;
-      #     mode = "challenge-response";
-      #     id = [ "18067815" ];
-      # };
   };
 
   # SSH AGENT
   programs.ssh.startAgent = true;
   services.gnome3.gnome-keyring.enable = false;
 
+  # Security PAM with yubico key
+  security.pam.yubico = {
+   enable = true;
+   debug = false;
+   mode = "challenge-response";
+   id = [ "26292316" ];
+};
+
   system.stateVersion = "23.11";
   nix.settings.experimental-features = ["nix-command" "flakes"];
 }