From c268638fd7afc9ba2b53c1fe925374d7cd845fa4 Mon Sep 17 00:00:00 2001
From: cinereal <cinereal@riseup.net>
Date: Wed, 13 Aug 2025 11:02:12 +0200
Subject: [PATCH] default mode

---
 options.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/options.nix b/options.nix
index 377b2d4..80595b4 100644
--- a/options.nix
+++ b/options.nix
@@ -93,7 +93,7 @@
                     mode = lib.mkOption {
                       type = lib.types.strMatching "^[0-7]{4}$";
                       description = "The unix file mode of the file. Must be a 4-digit octal number.";
-                      default = "0400";
+                      default = if file.config.group == "root" then "0400" else "0440";
                     };
                     deploy = lib.mkOption {
                       description = ''