From 4578ec70df628a83b4e5e704620b4d855a0c998b Mon Sep 17 00:00:00 2001
From: Gary Guo <gary@garyguo.net>
Date: Sun, 7 Dec 2025 15:35:42 +0000
Subject: [PATCH] nixos/plasma6: fix smartcard unlocking

Similar to fprint changes, ensure that kde-smartcard is dedicated to
smartcard and other two PAM configs don't use smartcard.
---
 nixos/modules/services/desktop-managers/plasma6.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/services/desktop-managers/plasma6.nix b/nixos/modules/services/desktop-managers/plasma6.nix
index feaa48c1f0d1..9f13a2eb7c76 100644
--- a/nixos/modules/services/desktop-managers/plasma6.nix
+++ b/nixos/modules/services/desktop-managers/plasma6.nix
@@ -331,9 +331,16 @@ in
         # "kde" must not have fingerprint authentication otherwise it can block password login.
         # See https://github.com/NixOS/nixpkgs/issues/239770 and https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/163.
         fprintAuth = false;
+        p11Auth = false;
+      };
+      kde-fingerprint = lib.mkIf config.services.fprintd.enable {
+        fprintAuth = true;
+        p11Auth = false;
+      };
+      kde-smartcard = lib.mkIf config.security.pam.p11.enable {
+        p11Auth = true;
+        fprintAuth = false;
       };
-      kde-fingerprint = lib.mkIf config.services.fprintd.enable { fprintAuth = true; };
-      kde-smartcard = lib.mkIf config.security.pam.p11.enable { p11Auth = true; };
     };
 
     security.wrappers = {