diff --git a/modules/homelab/services/smarthome/homeassistant/default.nix b/modules/homelab/services/smarthome/homeassistant/default.nix
index 2d2821d..046b4eb 100644
--- a/modules/homelab/services/smarthome/homeassistant/default.nix
+++ b/modules/homelab/services/smarthome/homeassistant/default.nix
@@ -76,8 +76,8 @@ in
     # override umask to make permissions work out
     systemd.services.${service}.serviceConfig = {
       UMask = lib.mkForce "0007";
-      User = "${service}";
-      Group = "${service}";
+      User = lib.mkForce "${service}";
+      Group = lib.mkForce "${service}";
     };
 
 #    # open firewall