c'est le bordel un peu

modules/common/yubikey.nix

@@ -0,0 +1,11 @@
+# Module: YubiKey Authentication
+# Description: Enables YubiKey-based PAM auth for login and sudo across systems
+# TODO
+{pkgs, ...}: {
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
+
+  services.udev.packages = [pkgs.yubikey-personalization];
+}