operator: allow reading systemd journal

2020-04-08 23:30:10 +02:00 · 2020-04-08 23:30:10 +02:00 · bceaa361ca
commit bceaa361ca
parent 145961c2de
1 changed files with 4 additions and 1 deletions
--- a/modules/presets/secure-node.nix
+++ b/modules/presets/secure-node.nix
@ -118,7 +118,10 @@ in {
    # Create user 'operator' which can access the node's services
    users.users.operator = {
      isNormalUser = true;
-      extraGroups = [ cfg.bitcoind.group ]
+      extraGroups = [
+          "systemd-journal"
+          cfg.bitcoind.group
+        ]
        ++ (optionals cfg.clightning.enable [ "clightning" ])
        ++ (optionals cfg.lnd.enable [ "lnd" ])
        ++ (optionals cfg.liquidd.enable [ cfg.liquidd.group ])