Commit 6658e75288cf

Vincent Demeester <vincent@sbr.pm>
2021-01-13 10:57:56
redhat: update some krb5 related configuration
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 52a50ab
Changed files (2)
systems
modules
profiles
redhat.nix
users
vincent
desktop
firefox.nix
systems/modules/profiles/redhat.nix
@@ -14,10 +14,13 @@ in
     environment.systemPackages = with pkgs; [
       krb5
       (google-chrome.override {
-        commandLineArgs = "--auth-negotiate-delegate-whitelist=*.redhat.com";
+        commandLineArgs = "--auth-negotiate-delegate-whitelist='*.redhat.com'";
       })
       libnotify
     ];
+    environment.etc."etc/krb5.conf" = {
+      source = pkgs.mkSecret ../../../secrets/etc/krb5.conf;
+    };
     # NetworkManager
     environment.etc."NetworkManager/system-connections/1-RHVPN.ovpn" = {
       source = pkgs.mkSecret ../../../secrets/etc/NetworkManager/system-connections/1-RHVPN.ovpn;
users/vincent/desktop/firefox.nix
@@ -109,7 +109,7 @@
         "toolkit.telemetry.unified" = false;
         "toolkit.telemetry.updatePing.enabled" = false;
         # Red Hat specific
-        "network.negotiate-auth.trusted-uris" = "redhat.com";
+        "network.negotiate-auth.trusted-uris" = ".redhat.com";
       };
     };
   };