#%PAM-1.0

# Set up user limits from /etc/security/limits.conf.
session    required   pam_limits.so

@include common-auth

# Below requires package 'libpam-u2f' (or equivalent PAM library) package installed first
# as well as 'pamu2fcfg > ${HOME}/.config/Yubico/u2f_keys' ('pamu2fcfg -n >> ${HOME}/.config/Yubico/u2f_keys' 
# for additional keys) first

auth    sufficient   pam_u2f.so cue [cue_prompt=Tap hardware key]

# Below requires 'libpam-google-authenticator' (or equivalent PAM library) package installed first
# as well as executing 'google-authenticator' as '$USER' first

auth    required     pam_google_authenticator.so nullok
@include common-account
@include common-session-noninteractive