diff --git a/users/users.nix b/users/users.nix
index 329df2a..d6d9d97 100644
--- a/users/users.nix
+++ b/users/users.nix
@@ -9,6 +9,7 @@
   users.extraUsers.podman.hashedPassword = "";
   users.users.podman.isNormalUser = true;
   users.users.gitea.isSystemUser = true;
+  users.groups.keys.members = [ "gitea" ];
   
   users.extraUsers.sky.hashedPassword = "";
   users.groups.wheel.members=["sky"];