From 6d0ee7494fff5b17455c339153bff0dea7afa022 Mon Sep 17 00:00:00 2001
From: ibizaman <ibizaman@tiserbox.com>
Date: Tue, 7 Oct 2025 01:02:05 +0200
Subject: [PATCH] nextcloud: allow to set sso integration without ldap

---
 modules/services/nextcloud-server.nix | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/modules/services/nextcloud-server.nix b/modules/services/nextcloud-server.nix
index f2bdb7a..032e34e 100644
--- a/modules/services/nextcloud-server.nix
+++ b/modules/services/nextcloud-server.nix
@@ -1065,10 +1065,6 @@ in
         ];
     in lib.mkIf (cfg.enable && cfg.apps.sso.enable) {
       assertions = [
-        {
-          assertion = cfg.apps.ldap.enable;
-          message = "SSO app requires LDAP app to work correctly.";
-        }
         {
           assertion = cfg.ssl != null;
           message = "To integrate SSO, SSL must be enabled, set the shb.nextcloud.ssl option.";
@@ -1128,6 +1124,7 @@ in
             groups = "groups";
             is_admin = "is_nextcloud_admin";
           };
+          oidc_login_allowed_groups = [ cfg.apps.ldap.userGroup ];
           oidc_login_default_group = "oidc";
           oidc_login_use_external_storage = false;
           oidc_login_scope = lib.concatStringsSep " " scopes;