And don't create a secret, either
This commit is contained in:
+1
-1
@@ -212,7 +212,7 @@ in {
|
|||||||
"LDAP_DEFAULT_AUTHTOKEN=${readFile cfg.ldap.bind-token-file}";
|
"LDAP_DEFAULT_AUTHTOKEN=${readFile cfg.ldap.bind-token-file}";
|
||||||
target-file = "/run/paris/sssd.env";
|
target-file = "/run/paris/sssd.env";
|
||||||
};
|
};
|
||||||
parisKeytab = {
|
parisKeytab = mkIf (!isNull cfg.kerberos) {
|
||||||
source-file = cfg.kerberos.keytab;
|
source-file = cfg.kerberos.keytab;
|
||||||
target-file = "/run/paris/keytab";
|
target-file = "/run/paris/keytab";
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user