danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

lldap: set better default for enforceGroups

Browse source
This commit is contained in:
ibizaman 2026-02-26 23:01:30 +01:00
parent c0c9562789
commit f3e9eb4206
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/blocks/lldap.nix
View file

@ -331,7 +331,7 @@ in
enforceGroups = mkOption { enforceGroups = mkOption {
description = "Remove groups not set declaratively."; description = "Remove groups not set declaratively.";
type = types.bool; type = types.bool;
default = true; default = false;
}; };
dashboard = lib.mkOption { dashboard = lib.mkOption {

2
modules/blocks/lldap/docs/default.md
View file

@ -83,7 +83,7 @@ Also, all other groups will be deleted and only the "family" group will remain.
Note that the `lldap_admin`, `lldap_password_manager` and `lldap_strict_readonly` groups, which are internal to LLDAP, will always exist. Note that the `lldap_admin`, `lldap_password_manager` and `lldap_strict_readonly` groups, which are internal to LLDAP, will always exist.
If you want existing groups not declared in the `shb.lldap.ensureGroups` to be deleted, If you want existing groups not declared in the `shb.lldap.ensureGroups` to be deleted,
set [`shb.lldap.enforceGroups`](#blocks-lldap-options-shb.lldap.enforceGroups) to `false`. set [`shb.lldap.enforceGroups`](#blocks-lldap-options-shb.lldap.enforceGroups) to `true`.
```nix ```nix
{ {