diff --git a/source/_posts/caddy-nixos-part-1.md b/source/_posts/caddy-nixos-part-1.md
index 9501ad4..4d7adea 100644
--- a/source/_posts/caddy-nixos-part-1.md
+++ b/source/_posts/caddy-nixos-part-1.md
@@ -229,6 +229,18 @@ Following is my "configuration.nix". I'll show you how to secure NixOS using has
     };
   };
 
+  ## Requires OTP to login & sudo
+  security.pam.services = [
+    {
+      name = "login";
+      googleAuthenticator.enable = false;
+    }
+    {
+      name = "sudo";
+      googleAuthenticator.enable = false;
+    }
+  ];
+
   ## Caddy web server
 #  require = [ /etc/caddy/caddyProxy.nix /etc/caddy/caddyTor.nix ];
 #  services.caddyProxy = {