diff --git a/nixos/modules/services/web-apps/gancio.nix b/nixos/modules/services/web-apps/gancio.nix
index fa55db762c46..997384521e8a 100644
--- a/nixos/modules/services/web-apps/gancio.nix
+++ b/nixos/modules/services/web-apps/gancio.nix
@@ -282,6 +282,8 @@ in
       ];
     };
     # for nginx to access gancio socket
-    users.users."${config.services.nginx.user}".extraGroups = [ config.users.users.${cfg.user}.group ];
+    users.users."${config.services.nginx.user}" = lib.mkIf (config.services.nginx.enable) {
+      extraGroups = [ config.users.users.${cfg.user}.group ];
+    };
   };
 }