Map Burrow admins to Zulip owners

2026-04-19 03:43:57 -07:00 · 2026-04-19 03:43:57 -07:00 · eb9327a99f
commit eb9327a99f
parent 5598fc18fc
3 changed files with 24 additions and 1 deletions
--- a/nixos/modules/burrow-zulip.nix
+++ b/nixos/modules/burrow-zulip.nix
@ -374,6 +374,7 @@ services:
                "url": "https://${cfg.authentikDomain}/application/saml/${cfg.authentikProviderSlug}/sso/binding/redirect/",
                "display_name": "burrow.net",
                "auto_signup": True,
+                "extra_attrs": ["zulip_role"],
                "x509cert": """$saml_cert""",
                "attr_user_permanent_id": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
                "attr_username": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
@ -382,6 +383,13 @@ services:
                "attr_last_name": "lastName",
            },
        }
+        SOCIAL_AUTH_SYNC_ATTRS_DICT = {
+            "authentik": {
+                "saml": {
+                    "role": "zulip_role",
+                },
+            },
+        }
 EOF
      '';
    };