Commit cc2ee3310040

Vincent Demeester <vincent@sbr.pm>
2025-04-23 01:59:35
systems/redhat: add required stuff for VPN
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 689dec1
Changed files (1)
systems
redhat
default.nix
systems/redhat/default.nix
@@ -6,6 +6,7 @@
     })
     # FIXME split this into real things
     scripts
+    oath-toolkit
   ];
   # Kerberos
   age.secrets."krb5.conf" = {
@@ -46,6 +47,11 @@
     path = "/etc/pki/tls/certs/2022-RH-IT-Root-CA.pem";
     mode = "444";
   };
+  age.secrets."2015-RH-IT-Root-CA.pem" = {
+    file = ../../secrets/redhat/2015-RH-IT-Root-CA.pem.age;
+    path = "/etc/pki/tls/certs/2015-RH-IT-Root-CA.pem";
+    mode = "444";
+  };
 
   # security.pki.certificates =[];
   security.pki.certificateFiles = [