Move to new module system, allows for multiple computers
Change-Id: I9a76346b05dfff6157813c50f89d1254130fc26c
diff --git a/modules/common/security.nix b/modules/common/security.nix
new file mode 100644
index 0000000..7466737
--- /dev/null
+++ b/modules/common/security.nix
@@ -0,0 +1,15 @@
+{ flakeRoot, ... }: {
+ security.pam.services = {
+ login.u2fAuth = true;
+ sudo.u2fAuth = true;
+ };
+
+ security.pam.u2f.authFile = "${flakeRoot}/keys/u2f_mappings";
+
+ security.sudo.extraRules = [
+ {
+ users = [ "minion" ];
+ commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
+ }
+ ];
+}