diff --git a/configs/mcp.nix b/configs/mcp.nix
index e02574b..30d91ba 100644
--- a/configs/mcp.nix
+++ b/configs/mcp.nix
@@ -16,6 +16,7 @@ in
     shell = pkgs.shadow; # nologin equivalent
     subUidRanges = [{ startUid = 100000; count = 65536; }];
     subGidRanges = [{ startGid = 100000; count = 65536; }];
+    extraGroups = [ "systemd-journal" ];
     linger = true;
   };