From 82251778dac9cd8d11a32f1edf114da60f283aa2 Mon Sep 17 00:00:00 2001
From: Tim Baumann <tim@timintech.com>
Date: Wed, 28 Oct 2026 04:48:53 +0100
Subject: [PATCH] fix: grant suite read access to Pi-hole logs

---
 deploy/maintenance-web.conf           | 1 +
 tests/test_install_maintenance_web.sh | 1 +
 2 files changed, 2 insertions(+)

diff --git a/deploy/maintenance-web.conf b/deploy/maintenance-web.conf
index c8d4142..f64db7d 100644
--- a/deploy/maintenance-web.conf
+++ b/deploy/maintenance-web.conf
@@ -1,2 +1,3 @@
 [Service]
+SupplementaryGroups=pihole
 ReadWritePaths=/var/backups/pihole-suite /var/lib/pihole-suite/exports /run/lock
diff --git a/tests/test_install_maintenance_web.sh b/tests/test_install_maintenance_web.sh
index 237d1d9..cf38e1a 100755
--- a/tests/test_install_maintenance_web.sh
+++ b/tests/test_install_maintenance_web.sh
@@ -129,6 +129,7 @@ VENV_TEST_ROOT="$VENV_TEST_ROOT" ROOT_DIR="$ROOT_DIR" bash -c '
 test -f "$DESTDIR/var/lib/pihole-suite/app/dashboard/index.html"
 test -f "$DESTDIR/var/lib/pihole-suite/app/dashboard/app.js"
 test -f "$DESTDIR/var/lib/pihole-suite/app/dashboard/style.css"
+grep -Fqx 'SupplementaryGroups=pihole' "$DESTDIR/etc/systemd/system/pihole-suite.service.d/maintenance-web.conf"
 first_tree="$({ cd "$DESTDIR" && find . -type f -print0 | sort -z | xargs -0 sha256sum; })"
 run_staged_install
 second_tree="$({ cd "$DESTDIR" && find . -type f -print0 | sort -z | xargs -0 sha256sum; })"