nixos/kerberos_server: add extraKDCArgs option (b3af89dd) · Commits · nix / nixpkgs

nixos/modules/services/system/kerberos/default.nix

+9 −0

Original line number	Diff line number	Diff line
		@@ -7,6 +7,7 @@

		let
		inherit (lib) mkOption types;
		inherit (lib.types) listOf str;
		cfg = config.services.kerberos_server;
		inherit (config.security.krb5) package;

		@@ -41,6 +42,14 @@ in
		'';
		default = { };
		};

		extraKDCArgs = mkOption {
		type = listOf str;
		description = ''
		Extra arguments to pass to the KDC process. See {manpage}`kdc(8)`.
		'';
		default = [ ];
		};
		};
		};

+10 −1

Original line number	Diff line number	Diff line
		@@ -2,11 +2,14 @@
		pkgs,
		config,
		lib,
		utils,
		...
		}:

		let
		inherit (lib) mapAttrs;
		inherit (utils) escapeSystemdExecArgs;

		cfg = config.services.kerberos_server;
		package = config.security.krb5.package;

		@@ -94,7 +97,13 @@ in
		"info:heimdal"
		];
		serviceConfig = {
		ExecStart = "${package}/libexec/kdc --config-file=/etc/heimdal-kdc/kdc.conf";
		ExecStart = escapeSystemdExecArgs (
		[
		"${package}/libexec/kdc"
		"--config-file=/etc/heimdal-kdc/kdc.conf"
		]
		++ cfg.extraKDCArgs
		);
		Slice = "system-kerberos-server.slice";
		StateDirectory = "heimdal";
		};

+11 −1

Original line number	Diff line number	Diff line
		@@ -2,11 +2,14 @@
		pkgs,
		config,
		lib,
		utils,
		...
		}:

		let
		inherit (lib) mapAttrs;
		inherit (utils) escapeSystemdExecArgs;

		cfg = config.services.kerberos_server;
		package = config.security.krb5.package;
		PIDFile = "/run/kdc.pid";
		@@ -91,7 +94,14 @@ in
		serviceConfig = {
		Type = "forking";
		PIDFile = PIDFile;
		ExecStart = "${package}/bin/krb5kdc -P ${PIDFile}";
		ExecStart = escapeSystemdExecArgs (
		[
		"${package}/bin/krb5kdc"
		"-P"
		"${PIDFile}"
		]
		++ cfg.extraKDCArgs
		);
		Slice = "system-kerberos-server.slice";
		StateDirectory = "krb5kdc";
		};