diff --git a/ops/nixos/clouvider-fra01/default.nix b/ops/nixos/clouvider-fra01/default.nix
index 965943208f..a71c403ad0 100644
--- a/ops/nixos/clouvider-fra01/default.nix
+++ b/ops/nixos/clouvider-fra01/default.nix
@@ -117,9 +117,16 @@ in {
     lukegb = {
       isNormalUser = true;
       uid = 1000;
-      extraGroups = [ "wheel" ];
+      extraGroups = [ "wheel" "content" ];
       hashedPassword = secrets.passwordHashes.root;
     };
+    content = {
+      isSystemUser = true;
+      extraGroups = [ "content" ];
+    };
+  };
+  users.groups = {
+    content = {};
   };
 
   boot.kernel.sysctl."net.ipv4.tcp_congestion_control" = "bbr";