added fprint support, downgraded vr version

1 files changed, 22 insertions, 5 deletions

diff --git a/os/core/security.nix b/os/core/security.nix
index afd2b2a..fa40372 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -9,9 +9,22 @@ let
   cfg = config.os.core.security;
 in
 {
-  options.os.core.security.enable = lib.mkEnableOption "core security services";
+  options.os.core.security = {
+    enable = lib.mkEnableOption "core security services";
+    fprint.enable = lib.mkEnableOption "enables fingerprint authentication";
+  };
   config = lib.mkIf cfg.enable {
-    services.gnome.gnome-keyring.enable = true;
+    services = {
+      gnome.gnome-keyring.enable = true;
+      fprintd = lib.mkIf cfg.fprint.enable {
+        enable = true;
+        package = pkgs.fprintd-tod;
+        tod = {
+          enable = true;
+          driver = pkgs.libfprint-2-tod1-vfs0090;
+        };
+      };
+    };
 
     security = {
       doas = {
@@ -24,10 +37,15 @@ in
           }
         ];
       };
-      # sudo.enable = false;
+      sudo.enable = false;
+
       pam.services = {
         swaylock = { };
-        login.enableGnomeKeyring = true;
+        doas.fprintAuth = cfg.fprint.enable;
+        login = {
+          enableGnomeKeyring = true;
+          fprintAuth = cfg.fprint.enable;
+        };
       };
       polkit.enable = true;
       rtkit.enable = true;
@@ -35,7 +53,6 @@ in
 
     environment.systemPackages = with pkgs; [
       doas-sudo-shim
-
       veracrypt
       bitwarden-desktop
       keepassxc