diff --git a/machines/control/configuration.nix b/machines/control/configuration.nix
index 8b53331..0d995a8 100644
--- a/machines/control/configuration.nix
+++ b/machines/control/configuration.nix
@@ -3,6 +3,8 @@
     ../../modules/hetzner-firewall.nix
   ];
 
+  clan.core.sops.defaultGroups = [ "admins" ];
+
   time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
   services.timesyncd.enable = true;
 
diff --git a/machines/ns1/configuration.nix b/machines/ns1/configuration.nix
index 722d0f4..23148bd 100644
--- a/machines/ns1/configuration.nix
+++ b/machines/ns1/configuration.nix
@@ -7,6 +7,8 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  clan.core.sops.defaultGroups = [ "admins" ];
+
   time.timeZone = "Etc/GMT-1"; # UTC+1 (fixed offset, no DST)
   services.timesyncd.enable = true;
 
diff --git a/machines/ns2/configuration.nix b/machines/ns2/configuration.nix
index 0ff71fd..4b583b2 100644
--- a/machines/ns2/configuration.nix
+++ b/machines/ns2/configuration.nix
@@ -7,6 +7,8 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  clan.core.sops.defaultGroups = [ "admins" ];
+
   time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
   services.timesyncd.enable = true;