diff --git a/sys/platforms/posixlycorrect/yubikey.nix b/sys/platforms/posixlycorrect/yubikey.nix index 1b9ee9f..0c852b8 100644 --- a/sys/platforms/posixlycorrect/yubikey.nix +++ b/sys/platforms/posixlycorrect/yubikey.nix @@ -18,15 +18,17 @@ enableSSHSupport = true; }; - security.pam.services = { - login.u2fAuth = true; - sudo.u2fAuth = true; - }; + security.pam = { + services = { + login.u2fAuth = true; + sudo.u2fAuth = true; + }; - security.pam.yubico = { - enable = true; - debug = false; - mode = "challenge-response"; - id = ["27677315"]; + u2f = { + enable = true; + debug = false; + cue = true; + control = "sufficient"; + }; }; }