From 3e3704e10455178f7750ddaa24c28955c62c4183 Mon Sep 17 00:00:00 2001
From: Pyjacpp <pyjacpp@crans.org>
Date: Sun, 21 Dec 2025 19:01:58 +0100
Subject: [PATCH] feat: add authentification for collabora admin page via pam

https://sdk.collaboraonline.com/docs/installation/Configuration.html#admin-console
---
 hosts/vm/collabora/collabora.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hosts/vm/collabora/collabora.nix b/hosts/vm/collabora/collabora.nix
index c6b15ef..01935aa 100644
--- a/hosts/vm/collabora/collabora.nix
+++ b/hosts/vm/collabora/collabora.nix
@@ -25,6 +25,13 @@
     };
   };
 
+  # Authentification pour la console d'administration (accès pour les nounous)
+  security.pam.services.coolwsd.text = ''
+    auth required pam_unix.so
+    auth required pam_wheel.so group=_nounou
+    account required pam_unix.so
+  '';
+
   services.nginx = {
     enable = true;