diff --git a/lib/fudo/hosts.nix b/lib/fudo/hosts.nix
index db97c95..c5a80a5 100644
--- a/lib/fudo/hosts.nix
+++ b/lib/fudo/hosts.nix
@@ -93,7 +93,7 @@ in {
 
     time.timeZone = site.timezone;
 
-    krb5.libdefaults.default_realm = domain.gssapi-realm;
+    security.krb5.settings.libdefaults.default_realm = domain.gssapi-realm;
 
     services = {
       cron.mailto = domain.admin-email;