diff --git a/machines/b4l/configuration.nix b/machines/b4l/configuration.nix
index 60b09ea..3b14865 100644
--- a/machines/b4l/configuration.nix
+++ b/machines/b4l/configuration.nix
@@ -12,6 +12,7 @@
   };
   networking.fqdn = "b4l.co.th";
   system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
 
   security.acme.defaults.email = "admin@b4l.co.th";
   security.acme.acceptTerms = true;