diff --git a/machines/dev/forgejo-ci/woodpecker.nix b/machines/dev/forgejo-ci/woodpecker.nix
index 860985bc..6fbdfb68 100644
--- a/machines/dev/forgejo-ci/woodpecker.nix
+++ b/machines/dev/forgejo-ci/woodpecker.nix
@@ -15,6 +15,8 @@
     woodpecker-agent-docker = { };
   };
 
+  users.users.nginx.extraGroups = [ "acme" ];
+
   age.secrets =
     lib.mapAttrs
       (_: group: {