{
  services.kanidm = {
    enableClient = true;
    enableServer = true;
  };
}