From 9271e78b899223a4bf80ca8967a6928ea4b395bc Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sun, 13 Mar 2022 16:47:27 -0600
Subject: Add PAM OATH

---
 sys/default.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'sys')

diff --git a/sys/default.nix b/sys/default.nix
index 2b265ec..c68c869 100644
--- a/sys/default.nix
+++ b/sys/default.nix
@@ -274,6 +274,8 @@ in {
       interfaces = mkIf (cfg.dhcpInterface != null) {
         "${cfg.dhcpInterface}".useDHCP = true;
       };
+
+      wireguard.enable = true;
     };
 
     i18n.defaultLocale = "es_CR.UTF-8";
@@ -288,6 +290,16 @@ in {
       displayManager.startx.enable = true;
     };
 
+    security.pam = {
+      oath = {
+        usersFile = "/var/trust/users.oath";
+        digits = 6;
+        window = 30;
+      };
+
+      services.sshd.oathAuth = true;
+    };
+
     services.openssh = {
       enable = true;
       openFirewall = false;
-- 
cgit v1.2.3