Add kerberos, various config

home/files/mpv/input.conf

@@ -2,3 +2,5 @@ WHEEL_UP ignore
 WHEEL_DOWN ignore
 WHEEL_LEFT ignore
 WHEEL_RIGHT ignore
+k add sub-scale -0.1
+K add sub-scale +0.1

sets/krb5.nix

@@ -0,0 +1,15 @@
+{ ... }:
+
+{
+  krb5 = {
+    enable = true;
+    libdefaults.default_realm = "ARTEM.IST";
+    domain_realm = {
+      "artem.ist" = "ARTEM.IST";
+      ".artem.ist" = "ARTEM.IST";
+    };
+
+    # Get everything else from DNS
+    realms."ARTEM.IST".admin_server = "manehattan.artem.ist";
+  };
+}

sets/pipewire.nix

@@ -12,7 +12,10 @@
   };
   hardware.pulseaudio.enable = lib.mkForce false;
   environment.systemPackages = with pkgs; [
-    qjackctl
     pulseaudioLight
+    qjackctl
+
+    carla
+    lsp-plugins
   ];
 }

sets/virtualization.nix

@@ -16,6 +16,9 @@
     };
   };
 
+  # Breaks IPv4 on bridge
+  boot.kernel.sysctl."net.bridge.bridge-nf-call-iptables" = 0;
+
   environment.systemPackages = with pkgs; [
     virtmanager
     spice_gtk

system/starlight/default.nix

@@ -11,6 +11,7 @@
     ../../sets/gpu/amd.nix
     ../../sets/hacking.nix
     ../../sets/hardware.nix
+    ../../sets/krb5.nix
     ../../sets/printing.nix
     ../../sets/ssh.nix
     ../../sets/virtualization.nix