add assertions: selfprivacy.sso.enable -> modules.*.enableSso

sp-modules/simple-nixos-mailserver/config-paths-needed.json

@@ -15,6 +15,7 @@
   [ "selfprivacy", "passthru", "auth", "oauth2-systemd-service" ],
   [ "selfprivacy", "passthru", "roundcube", "oauth-client-id" ],
   [ "selfprivacy", "passthru", "roundcube", "oauth-client-secret-fp" ],
+  [ "selfprivacy", "sso", "enable" ],
   [ "selfprivacy", "useBinds" ],
   [ "selfprivacy", "username" ],
   [ "selfprivacy", "users" ],

sp-modules/simple-nixos-mailserver/config.nix

@@ -71,6 +71,15 @@ let
 in
 lib.mkIf sp.modules.simple-nixos-mailserver.enable (lib.mkMerge [
   {
+    assertions = [
+      {
+        assertion =
+          config.selfprivacy.modules.simple-nixos-mailserver.enableSso
+          -> config.selfprivacy.sso.enable;
+        message =
+          "SSO cannot be enabled for Roundcube when SSO is disabled globally.";
+      }
+    ];
     fileSystems = lib.mkIf sp.useBinds
       {
         "/var/vmail" = {