From 084dbd13dd9be0ad94db1f4fa634bdac32cc1e6f Mon Sep 17 00:00:00 2001
From: Johannes Rothe <mail@johannes-rothe.de>
Date: Tue, 29 Apr 2025 22:52:23 +0200
Subject: [PATCH] Enable yubikey on lift

---
 hosts/lift/configuration.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/lift/configuration.nix b/hosts/lift/configuration.nix
index 3aed95b..ff21711 100644
--- a/hosts/lift/configuration.nix
+++ b/hosts/lift/configuration.nix
@@ -32,6 +32,11 @@
     password=${config.sops.placeholder."samba/password"}
   '';
 
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
+
   fileSystems."/mnt/media" = {
     device = "//dalinar.home.johannes-rothe.de/media";
     fsType = "cifs";