me like nix
1{ ... }: {
2 flake.modules.nixos.security = {
3 security.polkit.enable = true;
4
5 services.gnome.gnome-keyring.enable = true;
6 security.pam.services.greetd.enableGnomeKeyring = true;
7
8 services.pcscd.enable = true;
9
10 security.pam.u2f = {
11 enable = true;
12 settings = {
13 control = "sufficient";
14 cue = true;
15 origin = "pam://nixos";
16 appid = "pam://nixos";
17 };
18 };
19 security.pam.services.sudo.u2fAuth = true;
20
21 programs.yubikey-touch-detector.enable = true;
22 };
23}