From c1eb271eda4c62d39c021358d46a947decac8205 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Thu, 4 Jul 2024 22:22:10 -0700
Subject: [PATCH] Nest kerberos settings in `settings`

---
 lib/fudo/auth/kerberos/default.nix | 28 +++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/lib/fudo/auth/kerberos/default.nix b/lib/fudo/auth/kerberos/default.nix
index 8d7ec54..cb7cd1e 100644
--- a/lib/fudo/auth/kerberos/default.nix
+++ b/lib/fudo/auth/kerberos/default.nix
@@ -9,19 +9,21 @@ in {
     security.krb5 = {
       enable = true;
       kerberos = pkgs.heimdal;
-      libdefaults = {
-        default_realm = realm;
-        allow_weak_crypto = false;
-        dns_lookup_kdc = true;
-        dns_lookup_realm = true;
-        forwardable = true;
-        proxiable = true;
-      };
-      appdefaults = {
-        forwardable = true;
-        proxiable = true;
-        encrypt = true;
-        forward = true;
+      settings = {
+        libdefaults = {
+          default_realm = realm;
+          allow_weak_crypto = false;
+          dns_lookup_kdc = true;
+          dns_lookup_realm = true;
+          forwardable = true;
+          proxiable = true;
+        };
+        appdefaults = {
+          forwardable = true;
+          proxiable = true;
+          encrypt = true;
+          forward = true;
+        };
       };
     };