diff --git a/system/nixos/acme-sail.nix b/system/nixos/acme-sail.nix
index 9e6bf69..b47d1e5 100644
--- a/system/nixos/acme-sail.nix
+++ b/system/nixos/acme-sail.nix
@@ -6,6 +6,7 @@
 
     defaults = {
       email = "acme@kempkens.io";
+      group = "nginx";
       dnsProvider = "cloudflare";
       credentialsFile = config.age.secrets.acme-credentials.path;
       dnsResolver = "1.1.1.1:53";