From a4b49c990993fcf69d27b47c49e0211169fe6a11 Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Tue, 28 Jul 2026 07:16:53 +1000 Subject: [PATCH] fix(ipa): correct ipaServer to domain-controller.sweet.home ipa-getkeytab confirmed ipa.sweet.home doesn't respond to LDAP; domain-controller.sweet.home is the actual IPA server FQDN. Co-Authored-By: Claude Sonnet 4.6 --- variables.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/variables.nix b/variables.nix index 6ebc824..e438178 100644 --- a/variables.nix +++ b/variables.nix @@ -17,7 +17,7 @@ dockerIp = "192.168.2.225"; # docker Proxmox VM LAN IP pbsIp = "192.168.2.244"; # Proxmox Backup Server LAN IP (not NixOS-managed) domainControllerIp = "192.168.2.253"; # FreeIPA domain controller / primary DNS (not NixOS-managed) - ipaServer = "ipa.sweet.home"; # FreeIPA server hostname (used by security.ipa and Kerberos; must be a resolvable FQDN, not an IP — update if different) + ipaServer = "domain-controller.sweet.home"; # FreeIPA server hostname (used by security.ipa and Kerberos; must be a resolvable FQDN, not an IP) # Cross-host references (LAN hostnames/users other hosts reach over the network) nixCacheHost = "nix-cache"; # substituter/remote-builder hostname