diff --git a/system/server/coder.nix b/system/server/coder.nix
index 9893e03..b5f65e8 100644
--- a/system/server/coder.nix
+++ b/system/server/coder.nix
@@ -5,18 +5,22 @@
   ...
 }: let
   inherit (config.niksos) server;
+  inherit (config.services.coder) user;
   port = 9005;
   host = "coder.jsw.tf";
   sPort = builtins.toString port;
   httpsHost = "https://" + host;
 in {
   config = lib.mkIf server {
+    #TODO: start = after caddy + zitadel + network
     virtualisation.podman = {
       enable = true;
       dockerSocket.enable = true;
       dockerCompat = true;
       autoPrune.enable = true;
     };
+    users.groups.podman.members = [user];
+
     services = {
       caddy.virtualHosts."${host}".extraConfig = ''
         reverse_proxy :${sPort}