diff --git a/hosts/vm/collabora/collabora.nix b/hosts/vm/collabora/collabora.nix
index c61f5ea..ad0f3d5 100644
--- a/hosts/vm/collabora/collabora.nix
+++ b/hosts/vm/collabora/collabora.nix
@@ -31,7 +31,10 @@
   security.pam.services.coolwsd = {
     unixAuth = true;
     requireWheel = true;
-    rules.auth.wheel.settings.group = "_nounou";
+    rules.auth.wheel = {
+      order = config.security.pam.services.login.rules.auth.ldap.order + 10;
+      settings.group = "_nounou";
+    };
   };
 
   services.nginx = {