Onboarding Nextcloud
1. Add new club to list of clubs
In the GitHub repository k8s-shared, edit the clubs.yaml file config file and add:
Club name
Storage quota
Submit a pull request and merge it into main. This will provision the shared folder in Nextcloud.
2. That’s it !
The Open Tofu workflow will then create the associated groups and roles for that club.
The club-{name} and exec-{name} groups will be available in Authentik under Directory/groups inside the admin interface. Make sure at least one user is added to the exec group so that they can then add other users to either of those groups.

Authentik screenshot
Make sure that users that are in one group are not in the other, Nextcloud will restrict access to files on members of blacklisted groups regardless of if they are in the allowed group.