# Module: YubiKey Authentication
# Description: Enables YubiKey-based PAM auth for login and sudo across systems
# TODO
{pkgs, ...}: {
  security.pam.services = {
    login.u2fAuth = true;
    sudo.u2fAuth = true;
  };

  services.udev.packages = [pkgs.yubikey-personalization];
}