diff --git a/os/linux/nix/machines/beefcake.nix b/os/linux/nix/machines/beefcake.nix
index 4385c42..080c2d2 100644
--- a/os/linux/nix/machines/beefcake.nix
+++ b/os/linux/nix/machines/beefcake.nix
@@ -9,11 +9,13 @@
     ./beefcake-hardware.nix
   ];
 
-  services.api-lyte-dev = {
+  services.api-lyte-dev = rec {
     enable = true;
     port = 5757;
     stateDir = "/var/lib/api-lyte-dev";
     configFile = sops.secrets.api-lyte-dev.path;
+    user = "api-lyte-dev";
+    group = user;
   };
 
   sops = {