From 1095db59e9cf8e47724781662afbfdbe281d8672 Mon Sep 17 00:00:00 2001
From: k3t <k3t@k3t.dev>
Date: Tue, 14 Jul 2026 05:07:32 -0600
Subject: [PATCH] remove yubikey from pam (you can log in as ssh without a pw
 if its plugged in :sob:)

---
 modules/sys/security.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/modules/sys/security.nix b/modules/sys/security.nix
index b81c657..d3be48b 100644
--- a/modules/sys/security.nix
+++ b/modules/sys/security.nix
@@ -12,12 +12,12 @@
     sudo.execWheelOnly = true;
     polkit.enable = true;
     protectKernelImage = true;
-    pam.yubico = {
-       enable = true;
-       debug = true;
-       mode = "challenge-response";
-       id = [ "19694730" ];
-    };
+    #pam.yubico = {
+    #   enable = true;
+    #   debug = true;
+    #   mode = "challenge-response";
+    #   id = [ "19694730" ];
+    #};
     tpm2 = {
       enable = true;
       pkcs11.enable = true;