aspi: a try to implement kerberos

This commit is contained in:
Julian Mutter 2024-11-26 14:08:04 +01:00
parent 94eebc86b9
commit b422e9d092

View File

@ -93,6 +93,29 @@
services.openssh.enable = false;
services.flatpak.enable = true;
security.krb5.enable = true;
security.krb5.settings = {
# domain_realm = {
# ".julian-mutter.de" = "julian-mutter.de";
# "julian-mutter.de" = "julian-mutter.de";
# };
libdefaults = {
default_realm = "julian-mutter.de";
# dns_lookup_realm = true;
# dns_lookup_kdc = true;
# ticket_lifetime = "24h";
# renew_lifetime = "7d";
};
realms = {
"julian-mutter.de" = {
kdc = [ "kerberos.julian-mutter.de" ];
admin_server = "kerberos-admin.julian-mutter.de";
default_domain = "julian-mutter.de";
};
};
};
hardware.nvidia-container-toolkit.enable = true; # use gpu inside docker
virtualisation.docker.enable = true;
# Do not alway generate man-cache, making builds much faster