From bceaa361cab2a3008bba93abd918de4594b27b12 Mon Sep 17 00:00:00 2001
From: Erik Arvstedt <erik.arvstedt@gmail.com>
Date: Wed, 8 Apr 2020 23:30:10 +0200
Subject: [PATCH] operator: allow reading systemd journal

---
 modules/presets/secure-node.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/presets/secure-node.nix b/modules/presets/secure-node.nix
index 9b2ef95..0d2b666 100644
--- a/modules/presets/secure-node.nix
+++ b/modules/presets/secure-node.nix
@@ -118,7 +118,10 @@ in {
     # Create user 'operator' which can access the node's services
     users.users.operator = {
       isNormalUser = true;
-      extraGroups = [ cfg.bitcoind.group ]
+      extraGroups = [
+          "systemd-journal"
+          cfg.bitcoind.group
+        ]
         ++ (optionals cfg.clightning.enable [ "clightning" ])
         ++ (optionals cfg.lnd.enable [ "lnd" ])
         ++ (optionals cfg.liquidd.enable [ cfg.liquidd.group ])