···226 serviceConfig = {
227 ExecStart = "${pkgs.rustus}/bin/rustus";
228 StateDirectory = "rustus";
229+ # User name is defined here to enable restoring a backup for example
230+ # You will run the backup restore command as sudo -u rustus in order
231+ # to have write permissions to /var/lib
232+ User = "rustus";
233 DynamicUser = true;
234 LoadCredential = lib.optionals isHybridS3 [
235 "S3_ACCESS_KEY_PATH:${cfg.storage.s3_access_key_file}"