diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index 48c8976..09a48c3 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -372,6 +372,8 @@ in
   security.acme.email = "sb" + "@m-labs.hk";
   security.acme.certs = {
     "nixbld.m-labs.hk" = {
+      group = "nginx";
+      user = "nginx";
       webroot = "/var/lib/acme/acme-challenge";
       extraDomains = {
         "m-labs.hk" = null;