diff --git a/hosts/fw.cloonar.com/modules/gitea.nix b/hosts/fw.cloonar.com/modules/gitea.nix
index 37749f7..c853b9b 100644
--- a/hosts/fw.cloonar.com/modules/gitea.nix
+++ b/hosts/fw.cloonar.com/modules/gitea.nix
@@ -4,6 +4,13 @@ let
   ip = "10.42.97.3";
 in
 {
+  users.users.gitea = {
+    isSystemUser = true;
+    group = "gitea";
+    home = "/var/lib/gitea";
+    createHome = true;
+  };
+  users.groups.gitea = { };
   services.nginx.virtualHosts."${domain}" = {
     enableACME = true;
     forceSSL = true;
@@ -60,6 +67,10 @@ in
           "/etc/gitea/app.ini:/opt/bitnami/gitea/custom/conf/app.ini:ro"
           "/var/lib/acme/git.cloonar.com:/opt/bitnami/gitea/ssl:ro"
         ];
+        environment = {
+          USER_UID = config.users.users.gitea.uid;
+          USER_GID = config.users.groups.gitea.gid;
+        };
         extraOptions = [
           "--ip=${ip}"
         ];