From bab444711d9e7be22a7959a7d4fd508b2f1cea9b Mon Sep 17 00:00:00 2001
From: kB01 <kb01@kb-one.de>
Date: Sun, 26 Oct 2025 18:32:07 +0100
Subject: [PATCH] Added USB-Token

---
 systems/x86_64-linux/LoyAdjo/default.nix  | 8 +++++++-
 systems/x86_64-linux/LoyAdjo/hardware.nix | 1 +
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/systems/x86_64-linux/LoyAdjo/default.nix b/systems/x86_64-linux/LoyAdjo/default.nix
index 25300f6..7a47730 100644
--- a/systems/x86_64-linux/LoyAdjo/default.nix
+++ b/systems/x86_64-linux/LoyAdjo/default.nix
@@ -70,10 +70,16 @@
     ];
     dotoolXkbLayout = "de";
   };
+
+  # Security
+  security.rtkit.enable = true; # For Sound
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
   
   # Output
   services.pulseaudio.enable = false;
-  security.rtkit.enable = true;
   services.pipewire = {
     enable = true;
     alsa.enable = true;
diff --git a/systems/x86_64-linux/LoyAdjo/hardware.nix b/systems/x86_64-linux/LoyAdjo/hardware.nix
index 3abae9b..073e59a 100644
--- a/systems/x86_64-linux/LoyAdjo/hardware.nix
+++ b/systems/x86_64-linux/LoyAdjo/hardware.nix
@@ -32,6 +32,7 @@
     };
 
   boot.initrd.luks.devices."luks-11c71284-504f-4b84-a944-265ad793b139".device = "/dev/disk/by-uuid/11c71284-504f-4b84-a944-265ad793b139";
+  boot.initrd.luks.devices."luks-11c71284-504f-4b84-a944-265ad793b139".crypttabExtraOpts = ["fido2-device=auto"];
 
   fileSystems."/boot" =
     { device = "/dev/disk/by-uuid/3C1C-72D5";