clan.core.sops.defaultGroups to all machines

2026-07-31 09:18:18 +07:00
parent 7d549a9c17
commit 292a699a2b
6 changed files with 12 additions and 0 deletions
@@ -18,6 +18,8 @@ in
    ../../modules/monitoring/exporters.nix
  ];

+  clan.core.sops.defaultGroups = [ "admins" ];
+
  # Knot's state dir holds the non-regenerable DNSSEC key material (KSK/ZSK
  # private keys in the KASP keystore). Declaring it as clan state makes the
  # borgbackup client back it up; losing it forces an emergency DS rollover at