fix(monorepo-gerrit): Enable adding new email addresses to accounts r/2735

This is required when people change their email addresses (e.g.
cl/3349) as nothing in Gerrit will update that information from the
OAuth provider.

Change-Id: I1eafdf22efd37898dcd0d06bb9a5d1471ffb5e31
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3356
Tested-by: BuildkiteCI
Reviewed-by: eta <eta@theta.eu.org>
Reviewed-by: sterni <sternenseemann@systemli.org>
Reviewed-by: lukegb <lukegb@tvl.fyi>

1 files changed, 3 insertions, 0 deletions

diff --git a/ops/modules/monorepo-gerrit.nix b/ops/modules/monorepo-gerrit.nix
index b704ab153cb7..d4b37d860b53 100644
--- a/ops/modules/monorepo-gerrit.nix
+++ b/ops/modules/monorepo-gerrit.nix
@@ -96,6 +96,9 @@ in {
         # client-secret is set in /var/lib/gerrit/etc/secure.config.
       };
 
+      # Allow users to add additional email addresses to their accounts.
+      oauth.allowRegisterNewEmail = true;
+
       # Use Gerrit's built-in HTTP passwords, rather than trying to use the
       # password against the backing OAuth provider.
       auth.gitBasicAuthPolicy = "HTTP";