diff --git a/machines/dev/fedi203/woodpecker.nix b/machines/dev/fedi203/woodpecker.nix
index 6c7a7629..d07fca66 100644
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@@ -10,6 +10,11 @@
     defaults.email = "something@fediversity.eu";
   };
 
+  users.groups = {
+    woodpecker-agent-exec = { };
+    woodpecker-agent-docker = { };
+  };
+
   age.secrets =
     lib.mapAttrs
       (_: group: {