From 77869300ee0be20eb60eb10112f47165b49c3c31 Mon Sep 17 00:00:00 2001
From: ibizaman <ibizaman@tiserbox.com>
Date: Mon, 23 Feb 2026 22:44:07 +0100
Subject: [PATCH] forgejo: create ldap groups

---
 modules/services/forgejo.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/services/forgejo.nix b/modules/services/forgejo.nix
index daadbdc..387a072 100644
--- a/modules/services/forgejo.nix
+++ b/modules/services/forgejo.nix
@@ -44,6 +44,7 @@ in
 {
   imports = [
     ../blocks/nginx.nix
+    ../blocks/lldap.nix
 
     (lib.mkRemovedOptionModule [ "shb" "forgejo" "adminPassword" ] ''
       Instead, define an admin user in shb.forgejo.users and give it the same password, like so:
@@ -470,6 +471,12 @@ in
     (mkIf (cfg.enable && cfg.ldap.enable != false) {
       systemd.services.forgejo.wants = cfg.ldap.waitForSystemdServices;
       systemd.services.forgejo.after = cfg.ldap.waitForSystemdServices;
+
+      shb.lldap.ensureGroups = {
+        ${cfg.ldap.adminGroup} = { };
+        ${cfg.ldap.userGroup} = { };
+      };
+
       # The delimiter in the `cut` command is a TAB!
       systemd.services.forgejo.preStart =
         let