home

commit 6658e75288cfaa4b2838bda290b29e16d5e08ca3
parent 52a50abf0b00dc820ec2ab12a477f4fd919ba6f5
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Wed, 13 Jan 2021 10:57:56 +0100

redhat: update some krb5 related configuration

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/modules/profiles/redhat.nix
 | 
5
++++-
M
users/vincent/desktop/firefox.nix
 | 
2
+-

2 files changed, 5 insertions(+), 2 deletions(-)
diff --git a/systems/modules/profiles/redhat.nix b/systems/modules/profiles/redhat.nix
@@ -14,10 +14,13 @@ in
     environment.systemPackages = with pkgs; [
       krb5
       (google-chrome.override {
-        commandLineArgs = "--auth-negotiate-delegate-whitelist=*.redhat.com";
+        commandLineArgs = "--auth-negotiate-delegate-whitelist='*.redhat.com'";
       })
       libnotify
     ];
+    environment.etc."etc/krb5.conf" = {
+      source = pkgs.mkSecret ../../../secrets/etc/krb5.conf;
+    };
     # NetworkManager
     environment.etc."NetworkManager/system-connections/1-RHVPN.ovpn" = {
       source = pkgs.mkSecret ../../../secrets/etc/NetworkManager/system-connections/1-RHVPN.ovpn;
diff --git a/users/vincent/desktop/firefox.nix b/users/vincent/desktop/firefox.nix
@@ -109,7 +109,7 @@
         "toolkit.telemetry.unified" = false;
         "toolkit.telemetry.updatePing.enabled" = false;
         # Red Hat specific
-        "network.negotiate-auth.trusted-uris" = "redhat.com";
+        "network.negotiate-auth.trusted-uris" = ".redhat.com";
       };
     };
   };