refactor: [WIP] add hm and server profiles

This commit is contained in:
Leon Schwarzäugl 2025-04-03 00:20:26 +02:00
parent bd95ef4c9b
commit 9034735f84
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
38 changed files with 2559 additions and 2178 deletions

View file

@ -1,14 +1,17 @@
{ lib, nix-secrets, ... }:
{ lib, config, nix-secrets, ... }:
let
secretsDirectory = builtins.toString nix-secrets;
yubikey1 = lib.swarselsystems.getSecret "${secretsDirectory}/yubikey/yubikey1";
yubikey2 = lib.swarselsystems.getSecret "${secretsDirectory}/yubikey/yubikey2";
in
{
pam.yubico.authorizedYubiKeys = {
ids = [
"${yubikey1}"
"${yubikey2}"
];
options.swarselsystems.modules.yubikey = lib.mkEnableOption "yubikey settings";
config = lib.mkIf config.swarselsystems.modules.yubikey {
pam.yubico.authorizedYubiKeys = {
ids = [
"${yubikey1}"
"${yubikey2}"
];
};
};
}