Archived
beatzaplentyandClaude Sonnet 4.6
f4831c9370
- Add IPA client module with pre-provisioned keytab - Set networking.domain for correct Kerberos FQDN - Encrypted keytab covers lxc-pxe-boot and proxmox-pxe-boot age keys Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
27 lines
734 B
Nix
27 lines
734 B
Nix
{ vars, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(import ../../modules/ipa/client.nix {
|
|
keytabSopsFile = ../../secrets/pxe-boot.keytab;
|
|
caCertFile = ../../certs/ipa-ca.crt;
|
|
})
|
|
];
|
|
|
|
networking = {
|
|
hostName = "pxe-boot";
|
|
domain = vars.homeDomain;
|
|
useDHCP = false;
|
|
interfaces.${vars.lxcLanInterface}.ipv4.addresses = [{
|
|
address = vars.pxeServerIp;
|
|
prefixLength = vars.lanPrefixLength;
|
|
}];
|
|
defaultGateway = { address = vars.lanGateway; interface = vars.lxcLanInterface; };
|
|
nameservers = [ vars.domainControllerIp ];
|
|
};
|
|
|
|
# Preserved from the pre-refactor `pxe-boot` target — stateVersion must
|
|
# never be bumped on an already-installed machine.
|
|
system.stateVersion = "25.05";
|
|
}
|