|  |  |  | @ -331,6 +331,18 @@ | 
		
	
		
			
				|  |  |  |  |                                                                        "KerberosAuthentication yes") | 
		
	
		
			
				|  |  |  |  |                                                                       "\n")))) | 
		
	
		
			
				|  |  |  |  |         (service krb5-service-type %metznet-krb5-config) | 
		
	
		
			
				|  |  |  |  |         (service openvpn-client-service-type | 
		
	
		
			
				|  |  |  |  |                  (openvpn-client-configuration (ca "/var/lib/openvpn/ca.crt") | 
		
	
		
			
				|  |  |  |  |                                                (cert | 
		
	
		
			
				|  |  |  |  |                                                 "/var/lib/openvpn/client.crt") | 
		
	
		
			
				|  |  |  |  |                                                (key | 
		
	
		
			
				|  |  |  |  |                                                 "/var/lib/openvpn/client.key") | 
		
	
		
			
				|  |  |  |  |                                                (tls-auth | 
		
	
		
			
				|  |  |  |  |                                                 "/var/lib/openvpn/ta.key") | 
		
	
		
			
				|  |  |  |  |                                                (persist-key? #f) | 
		
	
		
			
				|  |  |  |  |                                                (remote (list (openvpn-remote-configuration | 
		
	
		
			
				|  |  |  |  |                                                               (name | 
		
	
		
			
				|  |  |  |  |                                                                "vpn.metznet.ca")))))) | 
		
	
		
			
				|  |  |  |  |         (service pam-krb5-service-type | 
		
	
		
			
				|  |  |  |  |                  (pam-krb5-configuration (pam-krb5 pam-krb5) | 
		
	
		
			
				|  |  |  |  |                                          (minimum-uid 1000))) | 
		
	
	
		
			
				
					|  |  |  | @ -358,11 +370,7 @@ | 
		
	
		
			
				|  |  |  |  |                          (sddm-configuration))) | 
		
	
		
			
				|  |  |  |  |           (modify-services %desktop-services | 
		
	
		
			
				|  |  |  |  |             (delete gdm-service-type) | 
		
	
		
			
				|  |  |  |  |             (nscd-service-type config => %metznet-nscd-configuration) | 
		
	
		
			
				|  |  |  |  |             (network-manager-service-type config => | 
		
	
		
			
				|  |  |  |  |                                           (network-manager-configuration (vpn-plugins | 
		
	
		
			
				|  |  |  |  |                                                                           (list | 
		
	
		
			
				|  |  |  |  |                                                                            network-manager-openvpn))))))) | 
		
	
		
			
				|  |  |  |  |             (nscd-service-type config => %metznet-nscd-configuration)))) | 
		
	
		
			
				|  |  |  |  | 
 | 
		
	
		
			
				|  |  |  |  | (define %base-services-nscd | 
		
	
		
			
				|  |  |  |  |   (modify-services %base-services | 
		
	
	
		
			
				
					|  |  |  | @ -371,20 +379,7 @@ | 
		
	
		
			
				|  |  |  |  | (define %server-services | 
		
	
		
			
				|  |  |  |  |   (append %metznet-services | 
		
	
		
			
				|  |  |  |  |           (list (service dbus-root-service-type) | 
		
	
		
			
				|  |  |  |  |                 (service dhcp-client-service-type) | 
		
	
		
			
				|  |  |  |  |                 (service openvpn-client-service-type | 
		
	
		
			
				|  |  |  |  |                          (openvpn-client-configuration (ca | 
		
	
		
			
				|  |  |  |  |                                                         "/var/lib/openvpn/ca.crt") | 
		
	
		
			
				|  |  |  |  |                                                        (cert | 
		
	
		
			
				|  |  |  |  |                                                         "/var/lib/openvpn/client.crt") | 
		
	
		
			
				|  |  |  |  |                                                        (key | 
		
	
		
			
				|  |  |  |  |                                                         "/var/lib/openvpn/client.key") | 
		
	
		
			
				|  |  |  |  |                                                        (tls-auth | 
		
	
		
			
				|  |  |  |  |                                                         "/var/lib/openvpn/ta.key") | 
		
	
		
			
				|  |  |  |  |                                                        (persist-key? #f) | 
		
	
		
			
				|  |  |  |  |                                                        (remote (list (openvpn-remote-configuration | 
		
	
		
			
				|  |  |  |  |                                                                       (name | 
		
	
		
			
				|  |  |  |  |                                                                        "vpn.metznet.ca"))))))))) | 
		
	
		
			
				|  |  |  |  |                 (service dhcp-client-service-type)))) | 
		
	
		
			
				|  |  |  |  | 
 | 
		
	
		
			
				|  |  |  |  | (define %metznet-server-services | 
		
	
		
			
				|  |  |  |  |   (append %server-services %base-services-nscd)) | 
		
	
	
		
			
				
					|  |  |  | 
 |