From fa9cd82739951c47a5374c92203889a96a8c18e8 Mon Sep 17 00:00:00 2001
From: Inex Code <inex.code@selfprivacy.org>
Date: Fri, 28 Mar 2025 17:21:08 +0300
Subject: [PATCH] fix: roundcube metadata

---
 sp-modules/roundcube/flake.nix  | 4 ++++
 sp-modules/roundcube/module.nix | 7 +++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/sp-modules/roundcube/flake.nix b/sp-modules/roundcube/flake.nix
index 66cd9a2..3af1bd2 100644
--- a/sp-modules/roundcube/flake.nix
+++ b/sp-modules/roundcube/flake.nix
@@ -27,6 +27,10 @@
       homepage = "https://roundcube.net/";
       sourcePage = "https://github.com/roundcube/roundcubemail";
       supportLevel = "normal";
+      sso = {
+        accessGroup = "sp.roundcube.users";
+        adminGroup = "sp.roundcube.admins";
+      };
     };
   };
 }
diff --git a/sp-modules/roundcube/module.nix b/sp-modules/roundcube/module.nix
index b9653dd..73f6388 100644
--- a/sp-modules/roundcube/module.nix
+++ b/sp-modules/roundcube/module.nix
@@ -47,10 +47,11 @@ in
     enableSso = (lib.mkOption {
       default = false;
       type = lib.types.bool;
-      description = "Enable SSO for Roundcube";
+      description = "Enable Single Sign-On";
     }) // {
       meta = {
-        type = "enable";
+        type = "bool";
+        weight = 1;
       };
     };
   };
@@ -105,8 +106,6 @@ in
         $config['oauth_identity_fields'] = ['email'];
         $config['oauth_login_redirect'] = true;
         $config['auto_create_user'] = true;
-        $config['oauth_verify_peer'] = false; # FIXME
-        # $config['oauth_pkce'] = 'S256'; # FIXME
       '';
       systemd.services.roundcube = {
         after = [ auth-passthru.oauth2-systemd-service ];