nixfiles/peers/tuc/default.nix
Sebastian Walz 860d31cee1
Tohu vaBohu
2023-04-21 00:22:52 +02:00

32 lines
1.0 KiB
Nix

{
kerberos
= Peer "Kerberos-Server"
{
configuration.krb5
= {
domain_realm
= {
".tu-chemnitz.de" = "TU-CHEMNITZ.DE";
};
enable = true;
libdefaults
= {
default_ccache_name = "KEYRING:persistent:%{uid}";
default_realm = "TU-CHEMNITZ.DE";
dns_lookup_kdc = true;
dns_lookup_realm = false;
forwardable = true;
rdns = false;
renew_lifetime = "30d";
ticket_lifetime = "30d";
};
realms."TU-CHEMNITZ.DE"
= {
admin_server = "kerberos-adm.tu-chemnitz.de";
kdc = "kerberos.tu-chemnitz.de";
};
};
};
}