operator: allow reading systemd journal

fort-nix · Apr 9, 2020 · bceaa36 · bceaa36
1 parent 145961c
commit bceaa36
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/modules/presets/secure-node.nix b/modules/presets/secure-node.nix
@@ -118,7 +118,10 @@ in {
     # Create user 'operator' which can access the node's services
     users.users.operator = {
       isNormalUser = true;
-      extraGroups = [ cfg.bitcoind.group ]
+      extraGroups = [
+          "systemd-journal"
+          cfg.bitcoind.group
+        ]
         ++ (optionals cfg.clightning.enable [ "clightning" ])
         ++ (optionals cfg.lnd.enable [ "lnd" ])
         ++ (optionals cfg.liquidd.enable [ cfg.liquidd.group ])