diff --git a/hosts/APPA/services/acme.nix b/hosts/APPA/services/acme.nix
index 090f927..3c3122d 100644
--- a/hosts/APPA/services/acme.nix
+++ b/hosts/APPA/services/acme.nix
@@ -14,6 +14,4 @@
     dnsPropagationCheck = true;
     credentialsFile = config.age.secrets.environments-acme.path;
   };
-
-  users.users.nginx.extraGroups = [ "acme" ];
 }
diff --git a/hosts/APPA/services/nginx.nix b/hosts/APPA/services/nginx.nix
index 66cd9ff..b5fb0a5 100644
--- a/hosts/APPA/services/nginx.nix
+++ b/hosts/APPA/services/nginx.nix
@@ -1,5 +1,7 @@
 { config, ... }:
 {
+  users.users.nginx.extraGroups = [ "acme" ];
+
   services.nginx = {
     enable = true;
     virtualHosts."dryb.org" = {