Setup yubikey login on maryland

users/mary/desktop.nix

@@ -20,6 +20,8 @@
   home.homeDirectory = "/home/mary";
 
   home.file.".config/mpv/mpv.conf".source = ./mpv.conf;
+  home.file.".yubico/challenge-24571727".source = ./yubico/challenge-24571727;
+  home.file.".yubico/challenge-24571716".source = ./yubico/challenge-24571716;
 
   # set cursor size and dpi for 4k monitor
   xresources.properties = {

users/mary/yubico/challenge-24571716

@@ -0,0 +1 @@
+v2:7ef62bfdac20c5a3f2ccf6e877783bae81237657bb7cc7b101f19ae7b525746483341c7df3da7984295db5152fdf08aed371d96a0bdaae3d1f8efdbc61e0f0:a80acce6ba7b38d801fd19aee43be85363325fc1:9308b59c384176839a9bcbbd7ad3db8f5fa310c93865cc71be46c74a76d25364:10000:2

users/mary/yubico/challenge-24571727

@@ -0,0 +1 @@
+v2:8408a5cc638d4f58feade6a2b8697e573d721d3cd122bd557e9a3b0d365c7813647ccb9259c7d8cda6529cf4208531371fef34c39e7b9bc5fd1f7d6c29b147:a4436515f93ac50fc289c46e860fafa599f52fd9:2029d44916683f82c3a439bfbe3870bdd40f1273236fbaa7c41ca89021cedac7:10000:2

worlds/maryland.nix

@@ -71,6 +71,19 @@ let
       allowedTCPPorts = [ 8000 22 ];
     };
 
+    security.pam = {
+      services = {
+        login.u2fAuth = true;
+        sudo.u2fAuth = true;
+      };
+      yubico = {
+        enable = true;
+        debug = true;
+        mode = "challenge-response";
+        id = [ "24571716" "24571727" ];
+      };
+    };
+
   };
 
   mary = pkgs.callPackage ../users/mary/default.nix {};