From fb073ae827e12a96dd0e8c81eb02495a36d727b7 Mon Sep 17 00:00:00 2001
From: Infinidoge <infinidoge@inx.moe>
Date: Wed, 21 Feb 2024 09:45:49 -0500
Subject: [PATCH] global/security: refactor SSH agent auth

---
 modules/global/security.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/global/security.nix b/modules/global/security.nix
index b363ba3..347a1d0 100644
--- a/modules/global/security.nix
+++ b/modules/global/security.nix
@@ -11,7 +11,10 @@ with lib;
       defaults.email = "infinidoge@inx.moe";
     };
 
-    pam.enableSSHAgentAuth = true;
+    pam.sshAgentAuth = {
+      enable = true;
+      authorizedKeysFiles = lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
+    };
   };
 
   hardware = {