homelab-ansible/playbooks/roles/pamconfig/templates/passkey-users.access.conf.j2

16 lines
533 B
Django/Jinja

# This file functions as a switch for passkey access. A user listed in the `passkey_users` variable will have an allow
# line in this file, which will require them to log in using a passkey. Note that THIS CAN LOCK YOU OUT if you do not
# have a passkey set up!!
#
# It only "allows" local connections, as currently there is no way to use a passkey over SSH.
{% for user in passkey_users | default([]) %}
+:{{ user }}:LOCAL
{% endfor %}
{% for group in passkey_groups | default([]) %}
+:({{ group }}):LOCAL
{% endfor %}
-:ALL:ALL