diff --git a/services/forgejo/default.nix b/services/forgejo/default.nix
index 8853ba4..b70face 100644
--- a/services/forgejo/default.nix
+++ b/services/forgejo/default.nix
@@ -55,6 +55,13 @@ in
     };
   };
 
+  users.groups.git = { };
+  users.users.git = {
+    isSystemUser = true;
+    createHome = false;
+    group = "git";
+  };
+
   networking.firewall.allowedTCPPorts = [ sshPort ];
 
   services.nginx.virtualHosts.${domain} = {