feat: add yubiauth and enable it for sudo

Changed files
+14
systems
koumakan
+1
systems/koumakan/configuration.nix
···
../../global/core.nix
../../global/programs
./networking
+
./security/pam.nix
];
boot.loader.efi = {
+13
systems/koumakan/security/pam.nix
···
+
{ ... }:
+
{
+
security.pam.yubico = {
+
enable = true;
+
id = builtins.readFile ./ykid.cry;
+
mode = "client";
+
#control = "requisite"; # TODO: uncomment if it works
+
};
+
+
security.pam.services = {
+
sudo.yubicoAuth = true;
+
};
+
}
systems/koumakan/security/ykid.cry

This is a binary file and will not be displayed.