From c5c867b43fd25d0aceb12e393d01c3d621a98796 Mon Sep 17 00:00:00 2001
From: _cry64 <them@dobutterfliescry.net>
Date: Sun, 15 Feb 2026 17:35:18 +1000
Subject: [PATCH] always use root group

---
 cerulean/nexus/nexus.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/cerulean/nexus/nexus.nix b/cerulean/nexus/nexus.nix
index 88f2863..41ef28b 100644
--- a/cerulean/nexus/nexus.nix
+++ b/cerulean/nexus/nexus.nix
@@ -133,7 +133,12 @@
       Cerulean Nexus node "${nodeName}" does not declare group membership as a list, got "${typeOf node.groups}" instead!
       Ensure `nexus.nodes.${nodeName}.groups` is a list under your call to `cerulean.mkNexus`.
     '';
-      node.groups
+    # ensure root group is always added
+      (node.groups
+        ++ {
+          _parent = null;
+          _name = ROOT_GROUP_NAME;
+        })
       # ensure all members are actually groups
       |> map (group: let
         got =