diff --git a/generated/cr-buildbucket.cfg b/generated/cr-buildbucket.cfg
index 0e23f27..357de99 100644
--- a/generated/cr-buildbucket.cfg
+++ b/generated/cr-buildbucket.cfg
@@ -9,7 +9,7 @@
   swarming {
     builders {
       name: "Example Builder"
-      swarming_host: "chromium-swarm.appspot.com.appspot.com"
+      swarming_host: "chromium-swarm.appspot.com"
       exe {
         cipd_package: "infra/recipe_bundles/gerrit.googlesource.com/luci-config"
         cipd_version: "refs/heads/main"
diff --git a/generated/realms.cfg b/generated/realms.cfg
index 4980f46..fe621ef 100644
--- a/generated/realms.cfg
+++ b/generated/realms.cfg
@@ -7,6 +7,10 @@
 realms {
   name: "@root"
   bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
     role: "role/configs.developer"
     principals: "group:googlers"
   }
diff --git a/main.star b/main.star
index 0cda51b..945d371 100755
--- a/main.star
+++ b/main.star
@@ -41,7 +41,7 @@
         luci.binding(
             roles = "role/configs.developer",
             groups = "googlers",
-        )
+        ),
 
         # Allow buildbucket to read config and recipes.
         luci.binding(