ntfy crowdsec

systems/x86_64-linux/jallen-nas/users.nix

@@ -57,8 +57,16 @@ in
       prometheus = {
         extraGroups = [ "keys" ];
       };
+
+      # crowdsec needs to read the ntfy.env SOPS template for notifications.
+      crowdsec = {
+        isSystemUser = true;
+        group = "crowdsec";
+        extraGroups = [ "keys" ];
+      };
     };
 
     groups.nextcloud-exporter = { };
+    groups.crowdsec = { };
   };
 }