diff --git a/services/media.nix b/services/media.nix
index 0d4ee7f..37aa6d1 100644
--- a/services/media.nix
+++ b/services/media.nix
@@ -12,6 +12,7 @@
     inherit
       (config.my.services)
       jellyfin
+      nextcloud
       transmission
       ;
   };
diff --git a/services/nextcloud.nix b/services/nextcloud.nix
index 7349970..951cb0d 100644
--- a/services/nextcloud.nix
+++ b/services/nextcloud.nix
@@ -83,6 +83,8 @@ in {
       };
     };
 
+    users.groups.media.members = ["nextcloud"];
+
     services.nginx = {
       virtualHosts = {
         "cloud.${domain}" = {