diff --git a/nix/module.nix b/nix/module.nix
index a3b386e..6702980 100644
--- a/nix/module.nix
+++ b/nix/module.nix
@@ -238,6 +238,8 @@ in
       '';
     };
 
+    users.users.${config.services.nginx.user}.extraGroups = [ cfg.group ];
+
     # nginx vhosts
     services.nginx = {
       enable = true;