diff --git a/krebs/3modules/git.nix b/krebs/3modules/git.nix
index d31d91b7c..0aa1ae0f2 100644
--- a/krebs/3modules/git.nix
+++ b/krebs/3modules/git.nix
@@ -362,10 +362,8 @@ let
     users.users.${cfg.user.name} = {
       inherit (cfg.user) home name uid;
       description = "Git repository hosting user";
-      extraGroups = [
-        # To allow running cgit-clear-cache via hooks.
-        cfg.cgit.fcgiwrap.group.name
-      ];
+      # To allow running cgit-clear-cache via hooks.
+      group = cfg.cgit.fcgiwrap.group.name;
       isSystemUser = true;
       shell = "/bin/sh";
       openssh.authorizedKeys.keys =