aspi: a try to implement kerberos
This commit is contained in:
parent
94eebc86b9
commit
b422e9d092
@ -93,6 +93,29 @@
|
||||
services.openssh.enable = false;
|
||||
services.flatpak.enable = true;
|
||||
|
||||
security.krb5.enable = true;
|
||||
security.krb5.settings = {
|
||||
# domain_realm = {
|
||||
# ".julian-mutter.de" = "julian-mutter.de";
|
||||
# "julian-mutter.de" = "julian-mutter.de";
|
||||
# };
|
||||
libdefaults = {
|
||||
default_realm = "julian-mutter.de";
|
||||
# dns_lookup_realm = true;
|
||||
# dns_lookup_kdc = true;
|
||||
# ticket_lifetime = "24h";
|
||||
# renew_lifetime = "7d";
|
||||
};
|
||||
realms = {
|
||||
"julian-mutter.de" = {
|
||||
kdc = [ "kerberos.julian-mutter.de" ];
|
||||
admin_server = "kerberos-admin.julian-mutter.de";
|
||||
default_domain = "julian-mutter.de";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
hardware.nvidia-container-toolkit.enable = true; # use gpu inside docker
|
||||
virtualisation.docker.enable = true;
|
||||
|
||||
# Do not alway generate man-cache, making builds much faster
|
||||
|
Loading…
x
Reference in New Issue
Block a user