From 755a390bdbcb70d5bd3044d9a1feac14c4b7ec11 Mon Sep 17 00:00:00 2001
From: joachimschmidt557 <joachim.schmidt557@outlook.com>
Date: Sun, 25 Jan 2026 18:39:36 +0100
Subject: [PATCH] dustbowl: use pam u2f instead of yubikey for login with
 yubikey

---
 nixos/dustbowl.nix | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/nixos/dustbowl.nix b/nixos/dustbowl.nix
index a79f331..4635f65 100644
--- a/nixos/dustbowl.nix
+++ b/nixos/dustbowl.nix
@@ -182,8 +182,7 @@
     git-lfs
     bubblewrap
     openconnect
-    yubikey-personalization
-    yubico-pam
+    yubikey-manager
     nmap
     bind.dnsutils
     gdb
@@ -488,10 +487,10 @@
     ];
   };
 
-  # Yubikey PAM
-  security.pam.yubico = {
-    enable = true;
-    mode = "challenge-response";
+  # Log in with Yubikey
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
   };
 
   # This value determines the NixOS release with which your system is to be