diff --git a/pp-forgejo.nix b/pp-forgejo.nix
index a30347f..be76f3b 100644
--- a/pp-forgejo.nix
+++ b/pp-forgejo.nix
@@ -53,6 +53,11 @@ in
     services.forgejo.settings.session.COOKIE_SECURE = lib.mkForce true;        # Why do I need to override this???
 
     services.forgejo.user = "git";
+    users.users.git = {
+      home = services.forgejo.stateDir;
+      useDefaultShell = true;
+      isSystemUser = true;
+    }
 
     # If true, openid users cannot create new account
     #services.forgejo.settings.service.DISABLE_REGISTRATION = lib.mkForce (!cfg.openIdEnabled);