diff --git a/deploy/flake.nix b/deploy/flake.nix
index 64e7c6d..ec19d29 100644
--- a/deploy/flake.nix
+++ b/deploy/flake.nix
@@ -20,6 +20,13 @@
               ExecStart = ''
                 ${handy_py}/bin/handyhelper
               '';
+              User = "handy";
+            };
+          };
+          users.users = {
+            handy = {
+              home = "/var/lib/handyhelper";
+              isSystemUser = true;
             };
           };
         })