diff --git a/common/default.nix b/common/default.nix
index 75bb165..89543e6 100644
--- a/common/default.nix
+++ b/common/default.nix
@@ -49,6 +49,8 @@
     dnssec = "false";
   };
 
+  services.nginx.extraGroups = ["within"];
+
   users.groups.within = { };
   systemd.services."within.homedir-setup" = {
     description = "Creates homedirs for /srv/within services";