From 57fb5b54abff11e8bd95355fd1c84c4ed841694f Mon Sep 17 00:00:00 2001
From: Audrey Dutcher <audrey@rhelmot.io>
Date: Sat, 22 Mar 2025 14:22:58 -0700
Subject: [PATCH] whack

---
 configuration.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index 5f854bf..f27607f 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -1,5 +1,7 @@
 { config, lib, pkgs, ... }:
 let nixKey = "/var/lib/nix/binary-cache-key";
+# just using the filepath interacts poorly with typechecking under diverted stores
+toStore = path: pkgs.writeText (builtins.baseNameOf path) (builtins.readFile path);
 in {
   imports = [ ./overlays/packages.nix ];
   nixpkgs.config.allowUnfree = true;
@@ -172,7 +174,7 @@ in {
 
   security.pam.u2f = {
     enable = true;
-    settings.authfile = ./dotfiles/u2f-keys;
+    settings.authfile = toStore ./dotfiles/u2f-keys;
     settings.cue = true;
   };