From 1f94b29d564deff15bc27c66d779c1e88655f875 Mon Sep 17 00:00:00 2001
From: Miguel Palhas <mpalhas@gmail.com>
Date: Thu, 16 Jul 2026 18:03:52 +0100
Subject: [PATCH] wip

---
 home/arrakis/default.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/home/arrakis/default.nix b/home/arrakis/default.nix
index f028153..754be03 100644
--- a/home/arrakis/default.nix
+++ b/home/arrakis/default.nix
@@ -20,6 +20,17 @@
 
   custom.hyprland.cursorSize = 32;
 
+  # Fingerprint unlock for hyprlock — arrakis is the only host with a reader
+  # (fprintd is enabled system-side in hosts/arrakis). hyprlock talks to fprintd
+  # over D-Bus directly (not via PAM), running in parallel with password input:
+  # type the password or touch the sensor. Enroll first with `fprintd-enroll`.
+  programs.hyprlock.settings.auth.fingerprint = {
+    enabled = true;
+    ready_message = "Scan fingerprint to unlock";
+    present_message = "Scanning...";
+    retries = 3;
+  };
+
   # Moonlight: client for the Sunshine server on konishi (stream games to this laptop).
   custom.gaming.moonlight = true;