1{ ... }: 2{ 3 security.pam.yubico = { 4 enable = true; 5 id = "91582"; 6 mode = "client"; 7 control = "requisite"; 8 }; 9 10 security.pam.services = { 11 sudo.yubicoAuth = true; 12 }; 13}