julian/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Releases Wiki Activity

aspi: a try to implement kerberos

Browse Source
This commit is contained in:
Julian Mutter 2024-11-26 14:08:04 +01:00
parent 94eebc86b9
commit b422e9d092
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
systems/x86_64-linux/aspi/default.nix
View File

@ -93,6 +93,29 @@
services.openssh.enable = false; services.openssh.enable = false;
services.flatpak.enable = true; services.flatpak.enable = true;
security.krb5.enable = true;
security.krb5.settings = {
# domain_realm = {
# ".julian-mutter.de" = "julian-mutter.de";
# "julian-mutter.de" = "julian-mutter.de";
# };
libdefaults = {
default_realm = "julian-mutter.de";
# dns_lookup_realm = true;
# dns_lookup_kdc = true;
# ticket_lifetime = "24h";
# renew_lifetime = "7d";
};
realms = {
"julian-mutter.de" = {
kdc = [ "kerberos.julian-mutter.de" ];
admin_server = "kerberos-admin.julian-mutter.de";
default_domain = "julian-mutter.de";
};
};
};
hardware.nvidia-container-toolkit.enable = true; # use gpu inside docker
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
# Do not alway generate man-cache, making builds much faster # Do not alway generate man-cache, making builds much faster