diff --git a/machines/orbi/media-nextcloud.nix b/machines/orbi/media-nextcloud.nix
index 3a52f77..6e24b11 100644
--- a/machines/orbi/media-nextcloud.nix
+++ b/machines/orbi/media-nextcloud.nix
@@ -6,8 +6,9 @@
 # https://docs.nextcloud.com/server/stable/admin_manual/maintenance/upgrade.html
 
 let
+  # todo : let nextcloud run as media, this would make this part easier.
   nextcloudUid = 1000;
-  nextcloudGid = 1000;
+  nextcloudGid = config.ids.gids.transmission;
   nextcloudPort = 9080;
   nextcloudHostName = "nextcloud.ingolf-wagner.de";
 
@@ -72,6 +73,11 @@ in
         mountPoint = "/run/secrets/nextcloud.database.input";
         isReadOnly = true;
       };
+      share = {
+        hostPath = config.services.syncthing.settings.folders.share.path;
+        mountPoint = "/media/share";
+        isReadOnly = true;
+      };
     };
 
     privateNetwork = false;
@@ -103,6 +109,10 @@ in
       };
 
       users.users.nextcloud.uid = nextcloudUid;
+      users.groups.nextcloud = {
+        gid = nextcloudGid;
+        members = [ "nextcloud" ];
+      };
 
       services.nginx = {
         defaultListen = [