diff --git a/modules/server/ddns.nix b/modules/server/ddns.nix
index f6c7a1e6..6c4cc4d3 100644
--- a/modules/server/ddns.nix
+++ b/modules/server/ddns.nix
@@ -9,11 +9,23 @@ in {
       ddns-updater-updated =
         pkgs.callPackage ../../packages/ddns-updater.nix { };
     in {
+
+      users.users.ddns-updater = { group = "ddns-updater"; };
+      users.groups.ddns-updater = { };
+
       ddns-updater = {
         enable = true;
         package = ddns-updater-updated;
         environment = { "PEROID" = "5m"; };
       };
+
+      systemd.services.ddns-updater = {
+        serviceConfig = {
+          DynamicUser = lib.mkForce false;
+          User = "ddns-updater";
+          Group = "ddns-updater";
+        };
+      };
       nginx.virtualHosts = {
         "ddns.sako.box" = {
           locations."/" = { proxyPass = "http://localhost:8000"; };