From bb3add09608195747038a529642b2d26eddb81d8 Mon Sep 17 00:00:00 2001
From: Pyjacpp <pyjacpp@crans.org>
Date: Mon, 22 Dec 2025 00:02:28 +0100
Subject: [PATCH] fix: pam_wheel order

---
 hosts/vm/collabora/collabora.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/vm/collabora/collabora.nix b/hosts/vm/collabora/collabora.nix
index c61f5ea..ad0f3d5 100644
--- a/hosts/vm/collabora/collabora.nix
+++ b/hosts/vm/collabora/collabora.nix
@@ -31,7 +31,10 @@
   security.pam.services.coolwsd = {
     unixAuth = true;
     requireWheel = true;
-    rules.auth.wheel.settings.group = "_nounou";
+    rules.auth.wheel = {
+      order = config.security.pam.services.login.rules.auth.ldap.order + 10;
+      settings.group = "_nounou";
+    };
   };
 
   services.nginx = {