diff --git a/debian/control b/debian/control
index d130d3bf2..21d662fa0 100644
--- a/debian/control
+++ b/debian/control
@@ -11,6 +11,7 @@ Uploaders:
  James Valleroy <jvalleroy@mailbox.org>,
 Build-Depends:
  debhelper-compat (= 13),
+ dh-sequence-installsysusers,
  dblatex,
  dh-python,
  docbook-xsl,
@@ -74,7 +75,6 @@ Depends:
  ${python3:Depends},
  ${misc:Depends},
  ${freedombox:Depends},
- adduser,
  augeas-tools,
  bind9-dnsutils,
  curl,
diff --git a/debian/freedombox.postinst b/debian/freedombox.postinst
index c824606f7..ff6bc2a58 100755
--- a/debian/freedombox.postinst
+++ b/debian/freedombox.postinst
@@ -13,21 +13,9 @@ sed -i 's+-:ALL EXCEPT root fbx (admin) (sudo):ALL+-:ALL EXCEPT root fbx plinth
 
 case "$1" in
     configure)
-        if ! getent group plinth >/dev/null; then
-            addgroup --system --quiet plinth
-        fi
-
-        if ! getent passwd plinth >/dev/null; then
-            adduser --system --quiet --ingroup plinth --no-create-home --home /var/lib/plinth plinth
-        fi
-
-        chown plinth: /var/lib/plinth
-        chown plinth: /var/lib/plinth/sessions
-
         if [ ! -e '/var/lib/freedombox/is-freedombox-disk-image' ]; then
             umask 377
             base64 < /dev/urandom | head -c 16 | sed -e 's+$+\n+' > /var/lib/plinth/firstboot-wizard-secret
-            chown plinth:plinth /var/lib/plinth/firstboot-wizard-secret
             db_subst plinth/firstboot_wizard_secret secret $(cat /var/lib/plinth/firstboot-wizard-secret)
             db_input high plinth/firstboot_wizard_secret || true
             db_go
diff --git a/debian/freedombox.sysusers b/debian/freedombox.sysusers
new file mode 100644
index 000000000..d79adecfc
--- /dev/null
+++ b/debian/freedombox.sysusers
@@ -0,0 +1 @@
+u! plinth - "FreedomBox service" /var/lib/plinth
diff --git a/debian/freedombox.tmpfiles b/debian/freedombox.tmpfiles
new file mode 100644
index 000000000..6a93eb87c
--- /dev/null
+++ b/debian/freedombox.tmpfiles
@@ -0,0 +1,3 @@
+d /var/lib/plinth 0755 plinth plinth
+d /var/lib/plinth/sessions 0755 plinth plinth
+Z /var/lib/plinth/firstboot-wizard-secret 0400 plinth plinth