From b668209ce9adfd6d7cd205f17d311392710c09c6 Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Sun, 27 Jul 2025 10:25:24 +0200
Subject: [PATCH] set service groups

---
 machines/dev/fedi203/woodpecker.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/machines/dev/fedi203/woodpecker.nix b/machines/dev/fedi203/woodpecker.nix
index 33d8d6c3..6c7a7629 100644
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@@ -218,10 +218,15 @@
           attic-client
         ];
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
+        extraGroups = [ "woodpecker-agent-exec" ];
       };
       docker = {
         enable = true;
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
+        extraGroups = [
+          "podman"
+          "woodpecker-agent-docker"
+        ];
       };
     };
   };