From 8eb0e90219a4de87d8d476e15329e14720f091c6 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Sat, 14 Mar 2026 18:31:25 +0100
Subject: added fprint support, downgraded vr version

---
 os/core/security.nix | 27 ++++++++++++++++++++++-----
 1 file changed, 22 insertions(+), 5 deletions(-)

(limited to 'os/core/security.nix')

diff --git a/os/core/security.nix b/os/core/security.nix
index afd2b2a..fa40372 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -9,9 +9,22 @@ let
   cfg = config.os.core.security;
 in
 {
-  options.os.core.security.enable = lib.mkEnableOption "core security services";
+  options.os.core.security = {
+    enable = lib.mkEnableOption "core security services";
+    fprint.enable = lib.mkEnableOption "enables fingerprint authentication";
+  };
   config = lib.mkIf cfg.enable {
-    services.gnome.gnome-keyring.enable = true;
+    services = {
+      gnome.gnome-keyring.enable = true;
+      fprintd = lib.mkIf cfg.fprint.enable {
+        enable = true;
+        package = pkgs.fprintd-tod;
+        tod = {
+          enable = true;
+          driver = pkgs.libfprint-2-tod1-vfs0090;
+        };
+      };
+    };
 
     security = {
       doas = {
@@ -24,10 +37,15 @@ in
           }
         ];
       };
-      # sudo.enable = false;
+      sudo.enable = false;
+
       pam.services = {
         swaylock = { };
-        login.enableGnomeKeyring = true;
+        doas.fprintAuth = cfg.fprint.enable;
+        login = {
+          enableGnomeKeyring = true;
+          fprintAuth = cfg.fprint.enable;
+        };
       };
       polkit.enable = true;
       rtkit.enable = true;
@@ -35,7 +53,6 @@ in
 
     environment.systemPackages = with pkgs; [
       doas-sudo-shim
-
       veracrypt
       bitwarden-desktop
       keepassxc
-- 
cgit v1.3