diff --git a/services/murmur.nix b/services/murmur.nix
index 77a30ed..b0ba07e 100644
--- a/services/murmur.nix
+++ b/services/murmur.nix
@@ -41,4 +41,5 @@ in
 
   # set ACLs so that the murmur user can read the certificates
   security.acme.certs."mumble.hacc.space".postRun = "${pkgs.acl}/bin/setfacl -Rm u:murmur:rX /var/lib/acme/mumble.hacc.space";
+  security.acme.certs."mumble.hacc.space".group = "murmur";
 }