diff --git a/profiles/user0/default.nix b/profiles/user0/default.nix
index 6c49163..a274ecf 100755
--- a/profiles/user0/default.nix
+++ b/profiles/user0/default.nix
@@ -39,6 +39,7 @@ in
         "vaultwarden"
         "vboxusers"
         "wheel"
+        "comfyui"
       ];
     };
   };
diff --git a/systems/ceres/config/comfyui.nix b/systems/ceres/config/comfyui.nix
index cdac944..0a39cb8 100755
--- a/systems/ceres/config/comfyui.nix
+++ b/systems/ceres/config/comfyui.nix
@@ -5,13 +5,9 @@
   ...
 }:
 let
-  inherit (flake.config.machines.devices)
-    ceres
-    ;
-  inherit (flake.config.services.instances)
-    comfyui
-    web
-    ;
+  inherit (flake.config.machines.devices) ceres;
+  inherit (flake.config.services.instances) comfyui web;
+  inherit (flake.config.people) user0;
   service = comfyui;
   localhost = web.localhost.address1;
 in
@@ -49,13 +45,10 @@ in
   };
 
   systemd.tmpfiles.rules = [
-    "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
-    "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
+    "Z ${service.paths.path0} 755 ${user0} ${service.name} -"
   ];
 
   users.users.${service.name}.extraGroups = [
-    "nginx"
-    "caddy"
     "users"
   ];