From 771b91f4f3be58f8c518703094b378e1a1c96902 Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Sun, 22 Sep 2019 20:25:03 +0800
Subject: [PATCH] nixbld: support yubikey+password 2FA

---
 nixbld-etc-nixos/configuration.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index 099d687..a421e04 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -29,6 +29,12 @@ in
 
   security.apparmor.enable = true;
 
+  security.pam.yubico = {
+    enable = true;
+    id = "49094";
+    control = "required";
+  };
+
   networking = {
     hostName = "nixbld";
     firewall = {