From e3ed7cd9765092453396bc0127d9d0ca9912dbf5 Mon Sep 17 00:00:00 2001
From: sivert <sivert@sliper.xyz>
Date: Thu, 8 Jan 2026 19:56:42 +0100
Subject: [PATCH] firefly-iii: allow admin group access

---
 modules/services/firefly-iii.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/services/firefly-iii.nix b/modules/services/firefly-iii.nix
index 7a6f2b7..9234841 100644
--- a/modules/services/firefly-iii.nix
+++ b/modules/services/firefly-iii.nix
@@ -407,7 +407,10 @@ in
               {
                 domain = "${cfg.subdomain}.${cfg.domain}";
                 policy = cfg.sso.authorization_policy;
-                subject = [ "group:${cfg.ldap.userGroup}" ];
+                subject = [
+                  "group:${cfg.ldap.userGroup}"
+                  "group:${cfg.ldap.adminGroup}"
+                ];
               }
             ];
           }