ldap: set fields the user can change on their own

applications/ldap.nix

@@ -143,7 +143,7 @@ Gonna use a priper nixos module for this
           "olcDatabase={-1}frontend".attrs = {
             objectClass = [ "olcDatabaseConfig" "olcFrontendConfig" ];
 
-            olcPasswordHash = "{SSHA512}";
+            olcPasswordHash = "{SHA512}";
           };
 
           "olcDatabase={1}mdb" = {
@@ -168,8 +168,12 @@ Gonna use a priper nixos module for this
                     by anonymous auth
                     by * none''
 
+                ''{1}to attrs=mail,sshPublicKey,cn,sn,skDiscord
+                    by self write
+                    by * read''
+
                 /* allow read on anything else */
-                ''{1}to *
+                ''{2}to *
                     by * read''
               ];