swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 00:57:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore[server]: disable u2f for ssh
Some checks failed
Flake check / Check flake (push) Has been cancelled
Details

Browse source
This commit is contained in:
Leon Schwarzäugl 2025-10-22 00:47:11 +02:00
parent b9f5c87aa0
commit 1519305952
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
2 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
SwarselSystems.org
View file

@ -4799,8 +4799,11 @@ Needed for control over system-wide privileges etc. Also I make sure that the ro
pam.services = lib.mkIf (!minimal) { pam.services = lib.mkIf (!minimal) {
login.u2fAuth = true; login.u2fAuth = true;
sudo.u2fAuth = true; sudo.u2fAuth = true;
swaylock.u2fAuth = true; sshd.u2fAuth = false;
swaylock.fprintAuth = false; swaylock = {
u2fAuth = true;
fprintAuth = false;
};
}; };
polkit.enable = lib.mkIf (!minimal) true; polkit.enable = lib.mkIf (!minimal) true;

7
modules/nixos/client/polkit.nix
View file

@ -7,8 +7,11 @@
pam.services = lib.mkIf (!minimal) { pam.services = lib.mkIf (!minimal) {
login.u2fAuth = true; login.u2fAuth = true;
sudo.u2fAuth = true; sudo.u2fAuth = true;
swaylock.u2fAuth = true; sshd.u2fAuth = false;
swaylock.fprintAuth = false; swaylock = {
u2fAuth = true;
fprintAuth = false;
};
}; };
polkit.enable = lib.mkIf (!minimal) true; polkit.enable = lib.mkIf (!minimal) true;