Eel: host for kerberos kdc and ldap - #326

Draft

jaysa68 wants to merge 53 commits into

mainfrom

Commits on May 10, 2026

eel draft
jaysa68
committed
1c2ec9c
ldap and krb modules
jaysa68
committed
dc768aa
nix fmt
jaysa68
committed
2eebbd3
move kerberos-kdc into auth module dir
jaysa68
committed
a68f0db
use cpw instead of change-password in heimdal acl
jaysa68
committed
9ebc0e5
publicKeyType should just be publicKey
jaysa68
committed
ba0900a
specify 312
jaysa68
committed
52cd212
add buildPerlPackage
jaysa68
committed
2c97b1f
ok, custom installPhase
jaysa68
committed
3853184
only need nativeBuildInputs makeWrapper
jaysa68
committed
bcf8783
writeShellScriptBin
jaysa68
committed
0352865
mkIf localDeployment
jaysa68
committed
9655a2e
fix format
jaysa68
committed
19c6b9f
still fixing deployment
jaysa68
committed
d51cb62
autoreconfHook
jaysa68
committed
e6f69e8
add eel host key and ldap deploy secret
jaysa68
committed
c011087
temp acme certs, fix ldap secret path
jaysa68
committed
20b3ffb
extremely sad fucked up eels octet
jaysa68
committed
cc6cb22
make ldap-keytab secret optional for now
jaysa68
committed
93a6c6f
rekey eel secrets
jaysa68
committed
771b9f4
at last, the keytab secret. after kdc dump
jaysa68
committed
c4c61f8
nix fmt
jaysa68
committed
153e62f
i have no mouth and i must rekey
jaysa68
committed
8389c23
kerb backup script, firewall rules
jaysa68
committed
b9e28cf
TLS cipher string in OpenSSL compatible format
jaysa68
committed
2ab8319
upload eels real key

Jaysa Garcia
authored and
jaysa68
committed
b74efb7
i forgot to rekey dude

Jaysa Garcia
authored and
jaysa68
committed
e36852b
ldap-git-backup: add missing Error.pm perl dependency

Jaysa Garcia
authored and
jaysa68
committed
00dd7dc
ldap-server: pass -F to slapcat for NixOS config dir

Jaysa Garcia
authored and
jaysa68
committed
52ee4f5
ldap-git-backup: patch /usr/bin/perl shebang for NixOS

Jaysa Garcia
authored and
jaysa68
committed
9916dfb
ldap-server: add openssh to ldap-git-backup service PATH

Jaysa Garcia
authored and
jaysa68
committed
d7516ec
ldap-server: use openssh_gssapi in ldap-git-backup service PATH

Jaysa Garcia
authored and
jaysa68
committed
a47d913
ldap-server: set git user config in ldap-git-backup script
jaysa68
committed
48d7103
ldap-server: treat git gc exit code 7 as success
jaysa68
committed
0f074ef
ldap-server: handle git gc exit 7 so git push always runs
jaysa68
committed
c3d92d9
add ldapai for admin access
jaysa68
committed
28ea16f
temp patch to drop OpenLDAPaci
jaysa68
committed
7cf9918
post-install fix pls
jaysa68
committed
c9ab2dd
nix fmt
jaysa68
committed
2ef45b7
add comment referring to puppet, motd, acme certs that are real
jaysa68
committed
adc9e86
correct kdc name
jaysa68
committed
e657c91
add openssl in base.nix
jaysa68
committed
add6ed6
fullchain cert
jaysa68
committed
90e8ab0
dont mess with motd module
jaysa68
committed
59b721b
point clients at ldap0 and kdc (eel) as primary servers
jaysa68
committed
5ad2e2e
add acme cert lol
jaysa68
committed
e1b0feb
enable fast false
jaysa68
committed
0b25818
rekey ldap-eel keytab
jaysa68
committed
689d47c
rekey secrets
Jaysa Garcia
committed
cacf0c6
move kdc services start after ldap
jaysa68
committed
6862d74

Commits on Aug 18, 2026

Merge remote-tracking branch 'upstream/main' into eel

jaysa68
and
claude
committed
82bcee4
please touch your token
jaysa68
committed
49a2f6a
move kerberos-kdc to modules/, assert heimdal

jaysa68
and
claude
committed
42aba6a