services.ssh-agent.pkcs11Whitelist

Specify a list of approved path patterns for PKCS#11 and FIDO authenticator middleware libraries. When using the -s or -S options with ssh-add(1), only libraries matching these patterns will be accepted.

See ssh-agent(1).

Type

list of string

Default

[ ]

Example

[ "${pkgs.tpm2-pkcs11}/lib/*" ]

Declared

<home-manager/modules/services/ssh-agent.nix>