From 62b86130d9e8642d42dca9162d10c9ca379ea6e9 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sun, 12 Dec 2021 22:57:32 -0800
Subject: [PATCH] Make sure /etc/openldap has the right ownership

---
 lib/fudo/ldap.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/fudo/ldap.nix b/lib/fudo/ldap.nix
index 3801d1b..883235c 100644
--- a/lib/fudo/ldap.nix
+++ b/lib/fudo/ldap.nix
@@ -256,6 +256,8 @@ in {
           ${build-ca-script ca-path
             cfg.ssl-chain
             cfg.ssl-ca-certificate}
+          # The script is failing to do this
+          chown "${user}:${group}" /etc/openldap
         '';
         serviceConfig = {
           PrivateDevices = true;