From 72950717af71b13d0d311740e7b7024e20183e6a Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sun, 30 Nov 2025 23:45:58 -0500
Subject: [PATCH] switch to arbitrary system gid for tls group

---
 deploy-web | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy-web b/deploy-web
index 8837639..877a8ac 100755
--- a/deploy-web
+++ b/deploy-web
@@ -20,7 +20,7 @@ for host in ${hosts_web[@]}; do
     rsync etc/logrotate.d/nginx $remote:/etc/logrotate.d/nginx
 
     ssh $remote 'mkdir -pm755 /var/cache/nginx &&
-groupadd -fg 2100 tls &&
+groupadd -fr tls &&
 mkdir -pm 750 /etc/tls/session-ticket-keys &&
 chmod 750 /etc/tls &&
 chown root:tls /etc/tls &&