a

module.nix

@@ -117,6 +117,7 @@ in
           auth_endpoint = "/ui/oauth2";
           client_secret = "@replace_oauth_secret@";
           map_user_id = "preferred_username";
+          map_username = "preferred_username";
           scope = "openid email profile";
         };
       };
@@ -127,6 +128,7 @@ in
         requires = [ "writefreely-sqlite-init.service" ];
         unitConfig.RequiresMountsFor = lib.mkIf sp.useBinds "/volumes/${cfg.location}/writefreely";
         serviceConfig.Slice = "writefreely.slice";
+        restartTriggers = [ (config.services.writefreely.settings // { type = "derivation"; }) ];
       };
 
       services.writefreely-sqlite-init = let
@@ -165,7 +167,7 @@ in
       clientSystemdUnits = [ "writefreely.service" ];
       enablePkce = false;
       scopeMaps = {
-        "${usersGroup}" = [ "email" "openid" "profile" "read_user" ];
+        "${usersGroup}" = [ "email" "openid" "profile" ];
       };
       linuxUserOfClient = "writefreely";
       linuxGroupOfClient = "writefreely";