diff --git a/services/ntpsec.ts b/services/ntpsec.ts
index 5587453..fd3313b 100644
--- a/services/ntpsec.ts
+++ b/services/ntpsec.ts
@@ -48,7 +48,7 @@ server gps.ntp.br nts iburst
   await runit.addService(
     "ntpsec",
     `#!/bin/sh
-exec ntpd --nice --nofork --panicgate
+exec ntpd --nice --nofork --panicgate --user=ntp
 `,
     runitLokiLogger(FluentBitParser.Ntpsec, "ntpsec")
   );