diff --git a/services/self_host/nextcloud.nix b/services/self_host/nextcloud.nix
index 2893a58..8dfac1c 100644
--- a/services/self_host/nextcloud.nix
+++ b/services/self_host/nextcloud.nix
@@ -14,6 +14,16 @@ in
     environment.systemPackages = with pkgs; [
       php
     ];
+    users = {
+      groups.datausers = { };
+      users = {
+        nextcloud.extraGroups = [ "datausers" ];
+      };
+    };
+
+    systemd.tmpfiles.rules = [
+      "d /mnt/data 2770 root datausers -"
+    ];
     services = {
       nextcloud = {
         enable = true;