diff --git a/hosts/architect/nextcloud.nix b/hosts/architect/nextcloud.nix
index 61b209f..c5e27f7 100644
--- a/hosts/architect/nextcloud.nix
+++ b/hosts/architect/nextcloud.nix
@@ -12,10 +12,12 @@ in
     nextcloud-admin = {
       file = ../../secrets/nextcloud-admin.age;
       owner = "nextcloud";
+      group ="nginx";
     };
     nextcloud-database = {
       file = ../../secrets/nextcloud-database.age;
       owner = "nextcloud";
+      group = "nginx";
     };
   };