diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix
index 5cc33f35adb..78e240e49ba 100644
--- a/nixos/modules/services/networking/dnscrypt-proxy.nix
+++ b/nixos/modules/services/networking/dnscrypt-proxy.nix
@@ -104,6 +104,10 @@ in
           /dev/null rw,
           /dev/urandom r,
 
+          /etc/passwd r,
+          /etc/group r,
+          ${config.environment.etc."nsswitch.conf".source} r,
+
           ${pkgs.glibc}/lib/*.so mr,
           ${pkgs.tzdata}/share/zoneinfo/** r,