64 lines
1.2 KiB
Nix
64 lines
1.2 KiB
Nix
{pkgs, config, lib, ...}:
|
|
|
|
let
|
|
|
|
inherit (lib) mkOption mkIf;
|
|
|
|
inherit (pkgs) heimdalFull;
|
|
|
|
stateDir = "/var/heimdal";
|
|
in
|
|
|
|
{
|
|
|
|
###### interface
|
|
|
|
options = {
|
|
|
|
services.kerberos_server = {
|
|
|
|
enable = mkOption {
|
|
default = false;
|
|
description = ''
|
|
Enable the kerberos authentification server.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
###### implementation
|
|
|
|
config = mkIf config.services.kerberos_server.enable {
|
|
|
|
environment.systemPackages = [ heimdalFull ];
|
|
|
|
services.xinetd.enable = true;
|
|
services.xinetd.services = lib.singleton
|
|
{ name = "kerberos-adm";
|
|
flags = "REUSE NAMEINARGS";
|
|
protocol = "tcp";
|
|
user = "root";
|
|
server = "${pkgs.tcp_wrappers}/bin/tcpd";
|
|
serverArgs = "${pkgs.heimdalFull}/bin/kadmind";
|
|
};
|
|
|
|
systemd.services.kdc = {
|
|
description = "Key Distribution Center daemon";
|
|
wantedBy = [ "multi-user.target" ];
|
|
preStart = ''
|
|
mkdir -m 0755 -p ${stateDir}
|
|
'';
|
|
script = "${heimdalFull}/bin/kdc";
|
|
};
|
|
|
|
systemd.services.kpasswdd = {
|
|
description = "Kerberos Password Changing daemon";
|
|
wantedBy = [ "multi-user.target" ];
|
|
script = "${heimdalFull}/bin/kpasswdd";
|
|
};
|
|
};
|
|
|
|
}
|