docs/secrets: mention defaultGroups option

This commit is contained in:
Jörg Thalheim
2025-04-03 14:02:05 +02:00
parent a4794e6ad0
commit 1fc2dd072b

View File

@@ -87,6 +87,14 @@ Here's how to get started:
clan secrets groups add-secret <group_name> <secret_name> clan secrets groups add-secret <group_name> <secret_name>
``` ```
**TIP** To encrypt all secrets of a machine for a specific group, use the following NixOS configuration:
```
{
clan.core.sops.defaultGroups = [ "groupname" ]
}
```
### Adding Machine Keys ### Adding Machine Keys
New machines in Clan come with age keys stored in `./sops/machines/<machine_name>`. To list these machines: New machines in Clan come with age keys stored in `./sops/machines/<machine_name>`. To list these machines: