From 7ff2cfa642b156cad802c0734f9dcf47c6aba74b Mon Sep 17 00:00:00 2001
From: ibizaman <ibizaman@tiserbox.com>
Date: Fri, 22 Aug 2025 23:09:53 +0200
Subject: [PATCH] authelia: allow password change

---
 modules/blocks/authelia.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/blocks/authelia.nix b/modules/blocks/authelia.nix
index cb8a418..d4e3d52 100644
--- a/modules/blocks/authelia.nix
+++ b/modules/blocks/authelia.nix
@@ -392,9 +392,9 @@ in
         # Inspired from https://github.com/lldap/lldap/blob/7d1f5abc137821c500de99c94f7579761fc949d8/example_configs/authelia_config.yml
         authentication_backend = {
           refresh_interval = "5m";
-          password_reset = {
-            disable = "false";
-          };
+          # We allow password reset and change because the ldap user we use allows it.
+          password_reset.disable = "false";
+          password_change.disable = "false";
           ldap = {
             implementation = "lldap";
             address = "ldap://${cfg.ldapHostname}:${toString cfg.ldapPort}";