From a1f37f6b199d92a70f569a29cc6f2b92ab5bd43e Mon Sep 17 00:00:00 2001
From: "Wyatt J. Miller" <wyatt@wyattjmiller.com>
Date: Fri, 15 May 2026 23:54:55 -0400
Subject: [PATCH] added yubico security module

---
 modules/machine/cloud/configuration.nix | 1 +
 modules/security/yubico.nix             | 8 ++++++++
 2 files changed, 9 insertions(+)
 create mode 100644 modules/security/yubico.nix

diff --git a/modules/machine/cloud/configuration.nix b/modules/machine/cloud/configuration.nix
index 4e296b9..f73f057 100644
--- a/modules/machine/cloud/configuration.nix
+++ b/modules/machine/cloud/configuration.nix
@@ -25,6 +25,7 @@ in {
     ../../graphics
     ../../pwrMgmt
     ../../networking/core.nix
+    ../../security/yubico.nix
     ../../sound/pipewire.nix
     ../../sound/shairport.nix
     ../../sound/focusrite.nix
diff --git a/modules/security/yubico.nix b/modules/security/yubico.nix
new file mode 100644
index 0000000..85c2b3a
--- /dev/null
+++ b/modules/security/yubico.nix
@@ -0,0 +1,8 @@
+{
+  ...
+}: let in {
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
+}