MikeFaith/authforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(pkg): debconf prompt for initial AuthForge policy on metapackage install

Browse Source
This commit is contained in:
michael
2026-04-27 19:19:12 -07:00
parent cccca786f7
commit 753bf54aad
3 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
debian/authforge.templates vendored Normal file
View File

@@ -0,0 +1,12 @@
Template: authforge/initial-policy
Type: select
Default: None
Choices: None, Optional everywhere, Required for sudo
Description: Initial AuthForge policy:
AuthForge can write a starter policy at install time. Choose:
.
None — install only, no MFA enforcement (admins configure later).
Optional everywhere — every PAM stack offers FIDO2/TOTP but doesn't require it.
Required for sudo — sudo prompts for FIDO2 or recovery code in addition to the password.
.
You can change this any time later via the AuthForge GUI or `authforgectl policy set`.