From 8eb0e90219a4de87d8d476e15329e14720f091c6 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Sat, 14 Mar 2026 18:31:25 +0100
Subject: added fprint support, downgraded vr version

---
 os/core/drivers.nix  |  5 -----
 os/core/security.nix | 27 ++++++++++++++++++++++-----
 2 files changed, 22 insertions(+), 10 deletions(-)

(limited to 'os/core')

diff --git a/os/core/drivers.nix b/os/core/drivers.nix
index 77ea721..4198bf5 100644
--- a/os/core/drivers.nix
+++ b/os/core/drivers.nix
@@ -62,9 +62,6 @@ in
         hardware.graphics = {
           enable = true;
           enable32Bit = true;
-          extraPackages = with pkgs; [
-            libva
-          ];
         };
         hardware.sensor.iio.enable = true;
       })
@@ -77,8 +74,6 @@ in
         };
         hardware.graphics.extraPackages = with pkgs; [
           rocmPackages.clr.icd
-          libva
-          libva-utils
         ];
       })
       {
diff --git a/os/core/security.nix b/os/core/security.nix
index afd2b2a..fa40372 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -9,9 +9,22 @@ let
   cfg = config.os.core.security;
 in
 {
-  options.os.core.security.enable = lib.mkEnableOption "core security services";
+  options.os.core.security = {
+    enable = lib.mkEnableOption "core security services";
+    fprint.enable = lib.mkEnableOption "enables fingerprint authentication";
+  };
   config = lib.mkIf cfg.enable {
-    services.gnome.gnome-keyring.enable = true;
+    services = {
+      gnome.gnome-keyring.enable = true;
+      fprintd = lib.mkIf cfg.fprint.enable {
+        enable = true;
+        package = pkgs.fprintd-tod;
+        tod = {
+          enable = true;
+          driver = pkgs.libfprint-2-tod1-vfs0090;
+        };
+      };
+    };
 
     security = {
       doas = {
@@ -24,10 +37,15 @@ in
           }
         ];
       };
-      # sudo.enable = false;
+      sudo.enable = false;
+
       pam.services = {
         swaylock = { };
-        login.enableGnomeKeyring = true;
+        doas.fprintAuth = cfg.fprint.enable;
+        login = {
+          enableGnomeKeyring = true;
+          fprintAuth = cfg.fprint.enable;
+        };
       };
       polkit.enable = true;
       rtkit.enable = true;
@@ -35,7 +53,6 @@ in
 
     environment.systemPackages = with pkgs; [
       doas-sudo-shim
-
       veracrypt
       bitwarden-desktop
       keepassxc
-- 
cgit v1.3