diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index c3850819..47484a26 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -11,6 +11,8 @@ in {
   config = mkIf cfg.enable {
     networking.firewall.allowedTCPPorts = [ 80 443 ];
 
+    user.extraGroups = [ "nginx" ];
+
     services.nginx = {
       enable = true;