1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs synced 2024-10-19 03:47:13 -04:00
nixpkgs/nixos/modules/security
Austin Seipp 29d46452dd nixos: add Duo Security module
This module adds the security.duosec attributes, which you can use to
enable simple two-factor authentication for NixOS logins.

The module currently provides PAM and SSH support, although the PAM unix
system configuration isn't automatically dealt with (although the
configuration is automatically built).

Enabling it is as easy as saying:

  security.duosec.ssh.enable = true;
  security.duosec.ikey       = "XXXXXXXX...";
  security.duosec.skey       = "XXXXXXXX...";
  security.duosec.host       = "api-XXXXXXX.duosecurity.com";
  security.duosec.group      = "duosec";

which will enforce two-factor authentication for SSH logins for users in
the 'duosec' group.

This requires uid/gid support in the environment.etc module.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-03-16 07:11:50 -05:00
..
apparmor-suid.nix
apparmor.nix
ca.nix Remove /etc/ca-bundle.crt 2014-02-11 17:13:36 +01:00
duosec.nix nixos: add Duo Security module 2014-03-16 07:11:50 -05:00
pam.nix
pam_usb.nix
polkit.nix polkit: Add some examples 2013-11-18 18:04:17 +01:00
prey.nix
rngd.nix
rtkit.nix
setuid-wrapper.c
setuid-wrappers.nix
sudo.nix