From 083defd69232273c1dc6d10495b2d3a02255c9ba Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sat, 13 Jan 2024 10:16:16 -0800
Subject: [PATCH] Change Pre/Post KDC jobs to scripts

---
 lib/fudo/auth/kerberos/kdc.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/fudo/auth/kerberos/kdc.nix b/lib/fudo/auth/kerberos/kdc.nix
index 478e00d..4312d62 100644
--- a/lib/fudo/auth/kerberos/kdc.nix
+++ b/lib/fudo/auth/kerberos/kdc.nix
@@ -332,7 +332,7 @@ let
                 SecureBits = "keep-caps";
                 ReadWritePaths = [ "${dirOf cfg.kdc.database}" ];
                 StateDirectory = "hemidal-hpropd";
-                ExecStartPre =
+                ExecStartPre = pkgs.writeShellScript "heimdal-prepare-db.sh"
                   "cp ${cfg.kdc.database} $STATE_DIRECTORY/realm.db";
                 ExecStart = let
                   startScript = pkgs.writeShellScript "launch-heimdal-hpropd.sh"
@@ -342,7 +342,7 @@ let
                       "--keytab=${cfg.kdc.secondary.keytabs.hpropd}"
                     ]);
                 in "${startScript}";
-                ExecStartPost = ''
+                ExecStartPost = pkgs.writeShellScript "heimdal-restore-db.sh" ''
                   chown ${cfg.user}:${cfg.group} $STATE_DIRECTORY/realm.db
                   mv $STATE_DIRECTORY/realm.db ${cfg.kdc.database}
                 '';