fix

module.nix

@@ -12,8 +12,8 @@ let
   oauthDiscoveryURL = config.services.kanidm.serverSettings.origin;
   issuer = lib.strings.removeSuffix "/.well-known/openid-configuration" oauthDiscoveryURL;
 
-  # SelfPrivacy uses SP Module ID to identify the group!
   usersGroup = "sp.mastodon.users";
+  adminGroup = "sp.mastodon.admins";
 
   oauthClientSecretFP = auth-passthru.mkOAuth2ClientSecretFP oauthClientID;
   oauthRedirectURL = "https://${cfg.subdomain}.${sp.domain}/auth/auth/openid_connect/callback";
@@ -119,6 +119,7 @@ in
 
     selfprivacy.auth.clients.${oauthClientID} = {
       inherit usersGroup;
+      inherit adminGroup;
       subdomain = cfg.subdomain;
       originLanding = "https://${cfg.subdomain}.${sp.domain}/";
       originUrl = oauthRedirectURL;