martials/nixos-configuration
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

✨ [thinkpad] Fingerprint for sudo and login. Upgraded hyprlock to unstable

Browse Source
This commit is contained in:
Martin Berg Alstad 2025-04-18 17:53:28 +02:00
parent 9e96de997d
commit 31c25681c5
Signed by: martials
GPG Key ID: 848D71DE0590C199
4 changed files with 33 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/thinkpad/home-manager/hyprland/default.nix
View File

@ -1,6 +1,7 @@
# Home configurations for Hyprland. For system configs, see ./modules/hyprland
{
imports = [
./hyprlock.nix
./hyprpanel.nix
./settings.nix
];

15
hosts/thinkpad/home-manager/hyprland/hyprlock.nix Normal file
View File

@ -0,0 +1,15 @@
{ pkgs, lib, ... }:
{
# TODO fingerprint prompt using $FPRINTPROMPT
programs.hyprlock = {
package = pkgs.unstable.hyprlock;
settings = {
auth."fingerprint:enabled" = true;
# Override removed settings shared config
general = lib.mkForce {
hide_cursor = true;
};
};
};
}

39
hosts/thinkpad/security.nix
View File

@ -2,27 +2,25 @@
{
security = {
pam = {
services = {
gdm-fingerprint.text = ''
auth required pam_shells.so
auth requisite pam_nologin.so
auth requisite pam_faillock.so preauth
auth required ${pkgs.fprintd}/lib/security/pam_fprintd.so
auth optional pam_permit.so
auth required pam_env.so
auth [success=ok default=1] ${pkgs.gdm}/lib/security/pam_gdm.so
auth optional ${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so
pam.services = {
gdm-fingerprint.text = ''
auth required pam_shells.so
auth requisite pam_nologin.so
auth requisite pam_faillock.so preauth
auth required ${pkgs.fprintd}/lib/security/pam_fprintd.so
auth optional pam_permit.so
auth required pam_env.so
auth [success=ok default=1] ${pkgs.gdm}/lib/security/pam_gdm.so
auth optional ${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so
account include login
account include login
password required pam_deny.so
password required pam_deny.so
session include login
session optional ${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so auto_start
'';
login.fprintAuth = false;
};
session include login
session optional ${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so auto_start
'';
login.fprintAuth = false;
};
};
@ -37,9 +35,4 @@
enable = true;
tod.driver = pkgs.libfprint-2-tod1-goodix-550a; # Goodix 550a driver (from Lenovo)
};
# however for focaltech 2808:a658, use fprintd with overidden package (without tod)
# services.fprintd.package = pkgs.fprintd.override {
# libfprint = pkgs.libfprint-focaltech-2808-a658;
# };
}

2
shared/home-manager/hyprland/hyprlock/default.nix
View File

@ -14,7 +14,7 @@
# GENERAL
general = {
disable_loading_bar = true;
disable_loading_bar = true; # TODO removed in hyprlock 0.8
hide_cursor = true;
};