{

  security.krb5.enable = true;
  security.krb5.settings = {
    # domain_realm = {
    #   ".julian-mutter.de" = "julian-mutter.de";
    #   "julian-mutter.de" = "julian-mutter.de";
    # };
    libdefaults = {
      default_realm = "julian-mutter.de";
      #   dns_lookup_realm = true;
      #   dns_lookup_kdc = true;
      #   ticket_lifetime = "24h";
      #   renew_lifetime = "7d";
    };
    realms = {
      "julian-mutter.de" = {
        kdc = [ "kerberos.julian-mutter.de" ];
        admin_server = "kerberos-admin.julian-mutter.de";
        default_domain = "julian-mutter.de";
      };
    };
  };
}