...

1 files changed, 3 insertions, 1 deletions

diff --git a/ymir.nix b/ymir.nix
index 50ae9c01..fa7fabe1 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -313,7 +313,9 @@ in rec {
   };
   security.pam.services."xmpp".text = ''
     auth requisite  pam_succeed_if.so user ingroup xmpp
-    auth required   pam_unix.so audit
+    auth    [success=1 default=ignore]  pam_unix.so obscure sha512 nodelay
+    auth    requisite           pam_deny.so
+    auth    required            pam_permit.so
   '';
   users.groups."shadow" = {
     members = [ "prosody"