From 41dfb8d3d47388f59173a72a7e323f3ce8d67d5d Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Thu, 29 Oct 2026 14:27:26 -0400
Subject: [PATCH] defaults

---
 defaults/main.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index b5704d3..ea31ec8 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -58,7 +58,19 @@ www_membership_environment_overrides: {}
 # Explicit effective membership level -> service group DNs. No inheritance.
 # Include a group at each level that should receive it; level 0 is free-only.
 # Only dedicate groups whose entire membership may be managed by this service.
-www_membership_service_groups: {}
+www_membership_service_groups:
+  "0":
+    - "cn=Dex Users,ou=Services,dc=eom,dc=dev"
+    - "cn=Discourse Users,ou=Services,dc=eom,dc=dev"
+    - "cn=Gitea Users,ou=Services,dc=eom,dc=dev"
+    - "cn=Matrix Users,ou=Services,dc=eom,dc=dev"
+  "1": []
+  "2": []
+  "3":
+    - "cn=Mastodon Users,ou=Services,dc=eom,dc=dev"
+    - "cn=PeerTube Users,ou=Services,dc=eom,dc=dev"
+  "4": []
+  "5": []
 
 # Public settings only. Credentials belong in the membership Secret.
 www_membership_environment: