✨ [thinkpad] Fingerprint for sudo and login. Upgraded hyprlock to unstable

hosts/thinkpad/home-manager/hyprland/default.nix

@@ -1,6 +1,7 @@
 # Home configurations for Hyprland. For system configs, see ./modules/hyprland
 {
   imports = [
+    ./hyprlock.nix
     ./hyprpanel.nix
     ./settings.nix
   ];

hosts/thinkpad/home-manager/hyprland/hyprlock.nix

@@ -0,0 +1,15 @@
+{ pkgs, lib, ... }:
+
+{
+  # TODO fingerprint prompt using $FPRINTPROMPT
+  programs.hyprlock = {
+    package = pkgs.unstable.hyprlock;
+    settings = {
+      auth."fingerprint:enabled" = true;
+      # Override removed settings shared config
+      general = lib.mkForce {
+        hide_cursor = true;
+      };
+    };
+  };
+}

hosts/thinkpad/security.nix

@@ -2,8 +2,7 @@
 
 {
   security = {
-    pam = {
+    pam.services = {
-      services = {
       gdm-fingerprint.text = ''
         auth       required                    pam_shells.so
         auth       requisite                   pam_nologin.so
@@ -24,7 +23,6 @@
       login.fprintAuth = false;
     };
   };
-  };
 
   # Start the driver at boot
   systemd.services.fprintd = {
@@ -37,9 +35,4 @@
     enable = true;
     tod.driver = pkgs.libfprint-2-tod1-goodix-550a; # Goodix 550a driver (from Lenovo)
   };
-
-  # however for focaltech 2808:a658, use fprintd with overidden package (without tod)
-  # services.fprintd.package = pkgs.fprintd.override {
-  #   libfprint = pkgs.libfprint-focaltech-2808-a658;
-  # };
 }

shared/home-manager/hyprland/hyprlock/default.nix

@@ -14,7 +14,7 @@
 
       # GENERAL
       general = {
-        disable_loading_bar = true;
+        disable_loading_bar = true; # TODO removed in hyprlock 0.8
         hide_cursor = true;
       };