diff --git a/pp-forgejo.nix b/pp-forgejo.nix
index cf487ae..ab535f1 100644
--- a/pp-forgejo.nix
+++ b/pp-forgejo.nix
@@ -57,7 +57,9 @@ in
       home = services.forgejo.stateDir;
       useDefaultShell = true;
       isSystemUser = true;
+      group = "git";
     };
+    users.groups.git = {};
 
     # If true, openid users cannot create new account
     #services.forgejo.settings.service.DISABLE_REGISTRATION = lib.mkForce (!cfg.openIdEnabled);