From c4df9a9b39695678f0f16d6eb2f9154da2251405 Mon Sep 17 00:00:00 2001
From: Jade <obsidianical@gmail.com>
Date: Sun, 18 Feb 2024 12:40:52 +0100
Subject: [PATCH] set up nitrokey stuff for desktop

---
 hosts/monosodium-glutamate-g/configuration.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hosts/monosodium-glutamate-g/configuration.nix b/hosts/monosodium-glutamate-g/configuration.nix
index 366dd4f..7010b36 100644
--- a/hosts/monosodium-glutamate-g/configuration.nix
+++ b/hosts/monosodium-glutamate-g/configuration.nix
@@ -82,6 +82,16 @@
     enableRedistributableFirmware = true;
   };
 
+  security.pam.services.jade.u2fAuth = true;
+  programs.i3lock.u2fSupport = true;
+
+  security.pam.u2f = {
+    enable = true;
+    cue = true;
+    control = "sufficient";
+    authFile = "/home/jade/.ssh/u2f_keys";
+  };
+
   # missing: menu-qalc picom-jonaburg
   environment.systemPackages = with pkgs; [
     # TODO: clean up.