diff --git a/systems/zaatar/backup.nix b/systems/zaatar/backup.nix
index 2df1d0d..8c356f2 100644
--- a/systems/zaatar/backup.nix
+++ b/systems/zaatar/backup.nix
@@ -17,7 +17,7 @@ in
 
   environment.systemPackages = [
     (pkgs.writers.writeDashBin "restic-niveum" ''
-      ${pkgs.restic}/bin/restic -r ${toString dataDir} -p ${<secrets/restic/password>} "$@"
+      exec ${pkgs.util-linux}/bin/runuser -u restic -g restic ${pkgs.restic}/bin/restic -r ${toString dataDir} -p ${<secrets/restic/password>} "$@"
     '')
   ];