From f856f2bcc47cf5bc7f7fa4906aa76f1f62da3c31 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Wed, 5 Jun 2024 14:08:29 -0700
Subject: [PATCH] And don't create a secret, either

---
 paris-container.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/paris-container.nix b/paris-container.nix
index 5a289b5..f6a85fe 100644
--- a/paris-container.nix
+++ b/paris-container.nix
@@ -212,7 +212,7 @@ in {
           "LDAP_DEFAULT_AUTHTOKEN=${readFile cfg.ldap.bind-token-file}";
         target-file = "/run/paris/sssd.env";
       };
-      parisKeytab = {
+      parisKeytab = mkIf (!isNull cfg.kerberos) {
         source-file = cfg.kerberos.keytab;
         target-file = "/run/paris/keytab";
       };