From c2882fcd8bdd8d4758e82eb568f6fefb9db814e5 Mon Sep 17 00:00:00 2001
From: Kyle Isom <kyle@imap.cc>
Date: Sun, 29 Mar 2026 18:00:48 -0700
Subject: [PATCH] allow mcp to read systemd logs

---
 configs/mcp.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configs/mcp.nix b/configs/mcp.nix
index e02574b..30d91ba 100644
--- a/configs/mcp.nix
+++ b/configs/mcp.nix
@@ -16,6 +16,7 @@ in
     shell = pkgs.shadow; # nologin equivalent
     subUidRanges = [{ startUid = 100000; count = 65536; }];
     subGidRanges = [{ startGid = 100000; count = 65536; }];
+    extraGroups = [ "systemd-journal" ];
     linger = true;
   };