{ ... }:

{
  security.krb5 = {
    enable = true;
    settings = {
      libdefaults.default_realm = "ARTEM.IST";
      domain_realm = {
        "artem.ist" = "ARTEM.IST";
        ".artem.ist" = "ARTEM.IST";
      };
      realms."ARTEM.IST" = {
        admin_server = "ironwill.mildlyfunctional.gay";
        kdc = "ironwill.mildlyfunctional.gay";
      };
    };
  };

  services.openafsClient = {
    enable = true;
    cellName = "artem.ist";
  };
}