diff --git a/users/jan/default.nix b/users/jan/default.nix
index 3e21165..ac57acb 100644
--- a/users/jan/default.nix
+++ b/users/jan/default.nix
@@ -13,8 +13,8 @@ let secrets = import ./secrets.nix; in
     isNormalUser = true;
     extraGroups = [
       "wheel" # Enable ‘sudo’ for the user.
-      "networkmanager"
-      "docker"
+      (lib.mkIf config.networking.networkmanager.enable "networkmanager")
+      (lib.mkIf config.virtualisation.docker.enable "docker")
     ];
     shell = pkgs.zsh;
     inherit (secrets) initialHashedPassword;