hedgedoc: fix login only with ldap group

2023-06-05 20:08:24 +02:00 · 2023-06-05 20:08:24 +02:00 · 237170a2cb
parent 502786feab
commit 237170a2cb
1 changed files with 2 additions and 1 deletions
--- a/hosts/hedgedoc/default.nix
+++ b/hosts/hedgedoc/default.nix
@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, lib, pkgs, ... }:

 {
  c3d2.deployment.server = "server10";
@ -28,6 +28,7 @@
        };
        defaultPermission = "freely";
        domain = "hedgedoc.c3d2.de";
+        ldap.searchFilter = lib.mkForce "(&(&(objectclass=person)(|(uid={{username}})(mail={{username}})))(isMemberOf=cn=hedgedoc,${config.security.ldap.roleBaseDN}))";
        loglevel = "warn";
        protocolUseSSL = true;
        sessionSecret = "$sessionSecret";