feat(nixos): add fingerprint authentication

rubenhoenle · Jul 14, 2024 · 2fe61cd · 2fe61cd
1 parent 9d9ac58
commit 2fe61cd
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -53,6 +53,16 @@ restic-hdd snapshots
 restic-hdd restore latest --target /
 ```
 
+## Fingerprint authentication
+
+```bash
+# add fingerprint
+sudo fprintd-enroll ruben
+
+# verify fingerprint
+sudo fprintd-verify ruben
+```
+
 ## agenix
 
 [agenix](https://github.com/ryantm/agenix) is a tool for encrypted secrets in your NixOS config.

diff --git a/modules/fingerprint.nix b/modules/fingerprint.nix
@@ -0,0 +1,9 @@
+{
+  services.fprintd.enable = true;
+
+  security.pam.services = {
+    swaylock.fprintAuth = false;
+    login.fprintAuth = true;
+    sudo.fprintAuth = true;
+  };
+}
diff --git a/modules/modules.nix b/modules/modules.nix
@@ -6,6 +6,7 @@
     ./bluetooth.nix
     ./boot.nix
     ./docker.nix
+    ./fingerprint.nix
     ./firmware.nix
     ./fonts.nix
     ./gtk.nix