Compare commits

..

3 commits

Author SHA1 Message Date
a90ba627bd
flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/67ff9807dd148e704baadbd4fd783b54282ca627' (2025-09-19)
  → 'github:nix-community/disko/3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5' (2025-10-17)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9a51fe84a7214f70a17e5d7ce085385baa24ee29' (2025-09-27)
  → 'github:nixos/nixpkgs/f2ee78c4eb601be36a277e1779a7a87655419dad' (2025-10-18)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/9ac51832c70f2ff34fcc97b05fa74b4a78317f9e' (2025-09-28)
  → 'github:Mic92/sops-nix/ab8d56e85b8be14cff9d93735951e30c3e86a437' (2025-10-13)
2025-10-21 02:32:11 +08:00
e0329f1f9a
update(pkgs): Update sources of all downstream packages 2025-10-21 02:32:09 +08:00
71ab2af0e5
fix(pam): Switch to rssh for ssh-agent based PAM auth
The old module stopped working with my new yubikey, so...
2025-10-21 02:18:28 +08:00

View file

@ -117,11 +117,11 @@
sudo.execWheelOnly = true;
pam = {
sshAgentAuth = {
rssh = {
enable = true;
authorizedKeysFiles = [ "/etc/ssh/authorized_keys.d/%u" ];
settings.auth_key_file = "/etc/ssh/authorized_keys.d/$ruser";
};
services.sudo.sshAgentAuth = true;
services.sudo.rssh = true;
};
};