feat(nix): opt-in dankshell-u2f PAM service for lock screen security keys

- Updated instructional pushed: https://danklinux.com/docs Related: #2874 Port 1.5
2026-08-09 06:58:29 -04:00 · 2026-07-17 18:07:06 -04:00
parent 3938e60ce4
commit c2c180d304
3 changed files with 26 additions and 1 deletions
@@ -200,7 +200,9 @@ in
    ];
    # DMS currently relies on /etc/pam.d/login for lock screen password auth on NixOS.
    # Declare security.pam.services.dankshell only if you want to override that runtime fallback.
-    # U2F and fingerprint are handled separately by DMS — do not add pam_u2f or pam_fprintd here.
+    # Do not add pam_u2f or pam_fprintd here for security-key unlock, enable
+    # programs.dank-material-shell.lockscreen.securityKey.enable, which declares the
+    # dedicated dankshell-u2f service DMS drives on its own.
    # security.pam.services.dankshell = {
    #   # Example: add faillock
    #   faillock.enable = true;