diff --git a/services/fediversity/pixelfed/default.nix b/services/fediversity/pixelfed/default.nix
index 2c3c2b7c..7df53527 100644
--- a/services/fediversity/pixelfed/default.nix
+++ b/services/fediversity/pixelfed/default.nix
@@ -51,6 +51,14 @@ in
     )
 
     (mkIf config.fediversity.pixelfed.enable {
+      ## NOTE: Pixelfed as packaged in nixpkgs has a permission issue that prevents Nginx
+      ## from being able to serving the images. We fix it here, but this should be
+      ## upstreamed. See https://github.com/NixOS/nixpkgs/issues/235147
+      services.pixelfed.package = pkgs.pixelfed.overrideAttrs (old: {
+        patches = (old.patches or [ ]) ++ [ ./group-permissions.patch ];
+      });
+      users.users.nginx.extraGroups = [ "pixelfed" ];
+
       services.pixelfed = {
         enable = true;
         domain = config.fediversity.pixelfed.domain;