init

modules/nixos/yubikey.nix

@@ -0,0 +1,13 @@
+# Module: YubiKey Authentication
+# Description: Enables YubiKey-based PAM auth for login and sudo across systems
+
+{ pkgs, ... }:
+
+{
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
+
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+}