From 3fb21ca846c0d5a697ebd1f791f3dc74fee5c3a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sat, 19 Oct 2024 21:37:26 +0300
Subject: [PATCH] immich: fix updated module

---
 modules/services/immich/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/services/immich/default.nix b/modules/services/immich/default.nix
index 2d933f5..a1b3c17 100644
--- a/modules/services/immich/default.nix
+++ b/modules/services/immich/default.nix
@@ -41,6 +41,7 @@ in
   imports = [ "${nixpkgs-unstable}/nixos/modules/services/web-apps/immich.nix" ];
 
   config = lib.mkIf cfg.enable {
+
     services.immich = {
       package = immich-package;
       enable = true;
@@ -64,6 +65,8 @@ in
         CapabilityBoundingSet = lib.mkForce "~";
         ExecStart = lib.mkForce ("!" + (lib.getExe startScript));
         PrivateUsers = lib.mkForce false; # bindfs fails otherwise
+
+        SupplementaryGroups = lib.mkForce [ "immich" ]; # TODO remove on 24.11
       };
     };