adds drasl ldap admin group

machines/gerd/services/drasl.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 
 let
   sources = import ./../../../shared/sources;
@@ -25,6 +25,15 @@ in {
 
       ListenAddress = "localhost:${builtins.toString port}";
 
+      # all ldap admins in group `drasl-admin` are default admins here
+      DefaultAdmins = config.mine.shared.lib.ldap.mkScope (lconfig: llib: let
+        admins = lib.forEach (
+          lib.filter
+            (v: lib.elem lconfig.groups.drasl_admin (v.groups or []))
+            (lib.attrValues lconfig.provision.users)
+        ) (v: v.mail);
+      in admins);
+
       CreateNewPlayer.Allow = true;
       RegistrationNewPlayer.Allow = true;
       AllowPasswordLogin = false;