diff options
Diffstat (limited to 'os/core/security.nix')
| -rw-r--r-- | os/core/security.nix | 27 |
1 files changed, 22 insertions, 5 deletions
diff --git a/os/core/security.nix b/os/core/security.nix index afd2b2a..fa40372 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -9,9 +9,22 @@ let cfg = config.os.core.security; in { - options.os.core.security.enable = lib.mkEnableOption "core security services"; + options.os.core.security = { + enable = lib.mkEnableOption "core security services"; + fprint.enable = lib.mkEnableOption "enables fingerprint authentication"; + }; config = lib.mkIf cfg.enable { - services.gnome.gnome-keyring.enable = true; + services = { + gnome.gnome-keyring.enable = true; + fprintd = lib.mkIf cfg.fprint.enable { + enable = true; + package = pkgs.fprintd-tod; + tod = { + enable = true; + driver = pkgs.libfprint-2-tod1-vfs0090; + }; + }; + }; security = { doas = { @@ -24,10 +37,15 @@ in } ]; }; - # sudo.enable = false; + sudo.enable = false; + pam.services = { swaylock = { }; - login.enableGnomeKeyring = true; + doas.fprintAuth = cfg.fprint.enable; + login = { + enableGnomeKeyring = true; + fprintAuth = cfg.fprint.enable; + }; }; polkit.enable = true; rtkit.enable = true; @@ -35,7 +53,6 @@ in environment.systemPackages = with pkgs; [ doas-sudo-shim - veracrypt bitwarden-desktop keepassxc |