diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index 9098b56..e935c0d 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -3,6 +3,7 @@
     acceptTerms = true;
     email = "me@lava.moe";
     certs."lava.moe" = {
+      group = "nginx";
       domain = "*.lava.moe";
       dnsProvider = "cloudflare";
       credentialsFile = config.age.secrets."acme_dns".path;