From 22e43f37157ce8e19632297ed26657fbdcacd556 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Mon, 2 Mar 2026 10:38:23 +0000
Subject: [PATCH] Allow accounts cookbook to manage membership of role groups

---
 cookbooks/apt/recipes/repository.rb      | 1 +
 cookbooks/blogs/recipes/default.rb       | 1 +
 cookbooks/community/recipes/default.rb   | 1 +
 cookbooks/letsencrypt/recipes/default.rb | 1 +
 cookbooks/otrs/recipes/default.rb        | 1 +
 cookbooks/overpass/recipes/default.rb    | 1 +
 cookbooks/oxidized/recipes/default.rb    | 1 +
 cookbooks/serverinfo/recipes/default.rb  | 1 +
 cookbooks/supybot/recipes/default.rb     | 1 +
 cookbooks/taginfo/recipes/default.rb     | 1 +
 10 files changed, 10 insertions(+)

diff --git a/cookbooks/apt/recipes/repository.rb b/cookbooks/apt/recipes/repository.rb
index a01fdcf38..b9e06cf4e 100644
--- a/cookbooks/apt/recipes/repository.rb
+++ b/cookbooks/apt/recipes/repository.rb
@@ -27,6 +27,7 @@ gpg_passphrase = repository_keys["gpg_passphrase"]
 
 group "apt" do
   gid 531
+  append true
 end
 
 user "apt" do
diff --git a/cookbooks/blogs/recipes/default.rb b/cookbooks/blogs/recipes/default.rb
index 9a5aff34a..b2c39eb87 100644
--- a/cookbooks/blogs/recipes/default.rb
+++ b/cookbooks/blogs/recipes/default.rb
@@ -31,6 +31,7 @@ package %w[
 
 group "blogs" do
   gid 525
+  append true
 end
 
 user "blogs" do
diff --git a/cookbooks/community/recipes/default.rb b/cookbooks/community/recipes/default.rb
index fb5fe801f..1f1ec9dd5 100644
--- a/cookbooks/community/recipes/default.rb
+++ b/cookbooks/community/recipes/default.rb
@@ -30,6 +30,7 @@ end.flatten
 
 group "community" do
   gid 527
+  append true
 end
 
 user "community" do
diff --git a/cookbooks/letsencrypt/recipes/default.rb b/cookbooks/letsencrypt/recipes/default.rb
index 7b87efd50..e2d387026 100644
--- a/cookbooks/letsencrypt/recipes/default.rb
+++ b/cookbooks/letsencrypt/recipes/default.rb
@@ -27,6 +27,7 @@ package "certbot"
 
 group "letsencrypt" do
   gid 526
+  append true
 end
 
 user "letsencrypt" do
diff --git a/cookbooks/otrs/recipes/default.rb b/cookbooks/otrs/recipes/default.rb
index 02be39381..e354d4109 100644
--- a/cookbooks/otrs/recipes/default.rb
+++ b/cookbooks/otrs/recipes/default.rb
@@ -26,6 +26,7 @@ passwords = data_bag_item("otrs", "passwords")
 
 group "otrs" do
   gid 513
+  append true
 end
 
 user "otrs" do
diff --git a/cookbooks/overpass/recipes/default.rb b/cookbooks/overpass/recipes/default.rb
index ce5b720df..76fa6871d 100644
--- a/cookbooks/overpass/recipes/default.rb
+++ b/cookbooks/overpass/recipes/default.rb
@@ -27,6 +27,7 @@ web_passwords = data_bag_item("web", "passwords")
 
 group username do
   gid 528
+  append true
 end
 
 user username do
diff --git a/cookbooks/oxidized/recipes/default.rb b/cookbooks/oxidized/recipes/default.rb
index 50dd0d0ba..51bec47dd 100644
--- a/cookbooks/oxidized/recipes/default.rb
+++ b/cookbooks/oxidized/recipes/default.rb
@@ -38,6 +38,7 @@ devices = data_bag_item("oxidized", "devices")
 
 group "oxidized" do
   gid 529
+  append true
 end
 
 user "oxidized" do
diff --git a/cookbooks/serverinfo/recipes/default.rb b/cookbooks/serverinfo/recipes/default.rb
index fdfd917f7..67a718f11 100644
--- a/cookbooks/serverinfo/recipes/default.rb
+++ b/cookbooks/serverinfo/recipes/default.rb
@@ -32,6 +32,7 @@ package %w[
 
 group "serverinfo" do
   gid 534
+  append true
 end
 
 user "serverinfo" do
diff --git a/cookbooks/supybot/recipes/default.rb b/cookbooks/supybot/recipes/default.rb
index b2a3fa736..d0e5e4eaa 100644
--- a/cookbooks/supybot/recipes/default.rb
+++ b/cookbooks/supybot/recipes/default.rb
@@ -25,6 +25,7 @@ package "python3-git"
 
 group "supybot" do
   gid 517
+  append true
 end
 
 user "supybot" do
diff --git a/cookbooks/taginfo/recipes/default.rb b/cookbooks/taginfo/recipes/default.rb
index 13e83df55..d097974fc 100644
--- a/cookbooks/taginfo/recipes/default.rb
+++ b/cookbooks/taginfo/recipes/default.rb
@@ -28,6 +28,7 @@ include_recipe "ruby"
 
 group "taginfo" do
   gid 520
+  append true
 end
 
 user "taginfo" do
-- 
2.39.5