From d552486321e6da794ef5965658b01d00f2c75a58 Mon Sep 17 00:00:00 2001
From: Max <max@privatevoid.net>
Date: Thu, 4 Aug 2022 01:16:49 +0200
Subject: [PATCH] modules/sss: do not perform dyndns when addrPublic exists

---
 modules/sss/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/sss/default.nix b/modules/sss/default.nix
index 1e3a499..86e1645 100644
--- a/modules/sss/default.nix
+++ b/modules/sss/default.nix
@@ -41,7 +41,7 @@ in
       cache_credentials = true;
       krb5_store_password_if_offline = true;
 
-      dyndns_update = interfaces ? primary.link;
+      dyndns_update = interfaces ? primary.link && ! interfaces.primary ? addrPublic;
       dyndns_iface = interfaces.primary.link or "";
 
       fallback_homedir = "/home/%u@%d";