Merge pull request 'docs/secrets: mention defaultGroups option' (#3193) from default-groups into main

Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/3193
2025-04-03 12:12:01 +00:00
parent 90e1ca6210 1fc2dd072b
commit 167e99e837
1 changed files with 8 additions and 0 deletions
--- a/docs/site/manual/secrets.md
+++ b/docs/site/manual/secrets.md
@@ -87,6 +87,14 @@ Here's how to get started:
   clan secrets groups add-secret <group_name> <secret_name>
   ```

+**TIP** To encrypt all secrets of a machine for a specific group, use the following NixOS configuration:
+
+```
+{
+  clan.core.sops.defaultGroups = [ "groupname" ]
+}
+```
+
 ### Adding Machine Keys

 New machines in Clan come with age keys stored in `./sops/machines/<machine_name>`. To list these machines: