diff --git a/machines/gerd/services/nextcloud.nix b/machines/gerd/services/nextcloud.nix
index e9d0b49..7c205a0 100644
--- a/machines/gerd/services/nextcloud.nix
+++ b/machines/gerd/services/nextcloud.nix
@@ -68,7 +68,7 @@ let
     done
 
     # promote ldap admin group to admins
-    ${occ} ldap:promote-group ${config.mine.shared.settings.ldap.groups.admin} || true
+    ${occ} ldap:promote-group ${config.mine.shared.settings.ldap.groups.admin} --yes -n
   '';
 
   # script for resetting nextcloud admin password on each startup