diff --git a/flake.lock b/flake.lock
index 56f57a3..5ae5b2a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -23,11 +23,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1713805509,
-        "narHash": "sha256-YgSEan4CcrjivCNO5ZNzhg7/8ViLkZ4CB/GrGBVSudo=",
+        "lastModified": 1716358718,
+        "narHash": "sha256-NQbegJb2ZZnAqp2EJhWwTf6DrZXSpA6xZCEq+RGV1r0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "1e1dc66fe68972a76679644a5577828b6a7e8be4",
+        "rev": "3f316d2a50699a78afe5e77ca486ad553169061e",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 7ae63f0..5f086e7 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,7 +10,6 @@
 
   outputs = { self, nixpkgs, utils, naersk }:
     let
-      inherit (nixpkgs) lib;
       makeBuzzrelay = pkgs:
         let
           naersk-lib = pkgs.callPackage naersk { };
diff --git a/nixos-module.nix b/nixos-module.nix
index 0089e19..16024ad 100644
--- a/nixos-module.nix
+++ b/nixos-module.nix
@@ -27,11 +27,11 @@
     };
     user = mkOption {
       type = types.str;
-      default = "relay";
+      default = "buzzrelay";
     };
     group = mkOption {
       type = types.str;
-      default = "relay";
+      default = "buzzrelay";
     };
     logLevel = mkOption {
       type = types.enum [ "ERROR" "WARN" "INFO" "DEBUG" "TRACE" ];
@@ -87,9 +87,7 @@
           ensureDatabases = [ cfg.database ];
           ensureUsers = [ {
             name = cfg.user;
-            ensurePermissions = {
-              "DATABASE ${cfg.database}" = "ALL PRIVILEGES";
-            };
+            ensureDBOwnership = true;
           } ];
         };