From 2d44a0884b5dfc37188780a4a1e63cf95be64cf9 Mon Sep 17 00:00:00 2001
From: Slavi Pantaleev <slavi@devture.com>
Date: Sat, 25 Apr 2026 22:31:40 +0300
Subject: [PATCH] Sync Continuwuity v0.5.8 LDAP StartTLS reference options

Adds the new `use_starttls` and `disable_tls_verification` keys to
the commented-out `[global.ldap]` reference block, matching upstream.
---
 .../matrix-continuwuity/templates/continuwuity.toml.j2    | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/custom/matrix-continuwuity/templates/continuwuity.toml.j2 b/roles/custom/matrix-continuwuity/templates/continuwuity.toml.j2
index 65639594c..14cfa6981 100644
--- a/roles/custom/matrix-continuwuity/templates/continuwuity.toml.j2
+++ b/roles/custom/matrix-continuwuity/templates/continuwuity.toml.j2
@@ -1909,6 +1909,14 @@ foci = [
 #
 #uri = ""
 
+# StartTLS for LDAP connections.
+#
+#use_starttls = false
+
+# Skip TLS certificate verification, possibly dangerous.
+#
+#disable_tls_verification = false
+
 # Root of the searches.
 #
 # example: "ou=users,dc=example,dc=org"