diff --git a/flake.lock b/flake.lock
index 0a04fd7..097e313 100644
--- a/flake.lock
+++ b/flake.lock
@@ -233,11 +233,11 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1720716326,
-        "narHash": "sha256-wflXa3lhKVZKf1BIZICaAohJEF0qbNgehEVgTLnbmO8=",
+        "lastModified": 1720807769,
+        "narHash": "sha256-bpP9fZ+OkeUI02YPtQG4G9SMG791oXZbKM6xFjHD8MQ=",
         "ref": "refs/heads/main",
-        "rev": "e63567dbb3da53348fe83993d9f8a48d9dff2629",
-        "revCount": 52,
+        "rev": "673b60b1a7e8a86114c9550cb38724cc675cf8f2",
+        "revCount": 53,
         "type": "git",
         "url": "file:./nix-secrets"
       },
diff --git a/modules/services/jellyfin.nix b/modules/services/jellyfin.nix
index 3839d66..6f738e9 100644
--- a/modules/services/jellyfin.nix
+++ b/modules/services/jellyfin.nix
@@ -34,7 +34,6 @@ in
 
   config = lib.mkIf cfg.enable {
     aux.system.users.media.enable = true;
-    users.users.jellyfin.extraGroups = [ "media" ];
 
     services = {
       nginx.virtualHosts."${cfg.url}" = {
@@ -83,6 +82,7 @@ in
       jellyfin = {
         enable = true;
         dataDir = lib.mkIf (cfg.home != "") cfg.home;
+        group = "media";
       };
     };