diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index 099d687..a421e04 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -29,6 +29,12 @@ in
 
   security.apparmor.enable = true;
 
+  security.pam.yubico = {
+    enable = true;
+    id = "49094";
+    control = "required";
+  };
+
   networking = {
     hostName = "nixbld";
     firewall = {