From aaeff0731bc92fa9d86115af8fa475136e666ccf Mon Sep 17 00:00:00 2001
From: David Crompton <david.crompton@mail.utoronto.ca>
Date: Wed, 1 Nov 2023 14:46:35 -0400
Subject: [PATCH] Enable Gitea PAM Auth

---
 machines/kcnhub/servers/gitea.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/machines/kcnhub/servers/gitea.nix b/machines/kcnhub/servers/gitea.nix
index dac3e3c..f6ca0ce 100644
--- a/machines/kcnhub/servers/gitea.nix
+++ b/machines/kcnhub/servers/gitea.nix
@@ -20,6 +20,9 @@ in {
     };
   };
 
+  # To allow gitea to access /etc/shadow for PAM authentication
+  users.users.gitea.extraGroups = [ "shadow" ];
+
   # Services Runner running in nixos-container w/ host label
   # This allows sharing of nix-store for caching actions builds
   # ... Maybe I'll actually set this up. Some concern for clearing its