diff --git a/rpi4.nix b/rpi4.nix
index b5b6e03..8142880 100644
--- a/rpi4.nix
+++ b/rpi4.nix
@@ -85,7 +85,7 @@ with builtins; {
 
   users.users.felschr = {
     isNormalUser = true;
-    extraGroups = [ "wheel" "audio" "disk" ];
+    extraGroups = [ "wheel" "audio" "disk" "media" ];
     shell = pkgs.zsh;
     openssh.authorizedKeys.keyFiles = [ ./key ];
   };
diff --git a/services/jellyfin.nix b/services/jellyfin.nix
index 9f34caf..52941cc 100644
--- a/services/jellyfin.nix
+++ b/services/jellyfin.nix
@@ -1,13 +1,14 @@
 { config, pkgs, ... }:
 
-let user = "felschr";
-in {
+{
+  users.groups.media = { };
+
   services.jellyfin.enable = true;
-  services.jellyfin.user = user;
+  services.jellyfin.group = "media";
   services.jellyfin.openFirewall = true;
 
   # for hardware acceleration
-  users.users."${user}".extraGroups = [ "video" "render" ];
+  users.users.jellyfin.extraGroups = [ "video" "render" ];
 
   services.nginx = {
     virtualHosts."media.felschr.com" = {