diff --git a/modules/services/networking/privoxy.nix b/modules/services/networking/privoxy.nix
index eee020a1f0e..a63a32996eb 100644
--- a/modules/services/networking/privoxy.nix
+++ b/modules/services/networking/privoxy.nix
@@ -12,7 +12,7 @@ let
 
   modprobe = config.system.sbin.modprobe;
 
-  privoxyFlags = "--no-daemon ${privoxyCfg}";
+  privoxyFlags = "--no-daemon --user ${privoxyUser} ${privoxyCfg}";
 
   privoxyCfg = pkgs.writeText "privoxy.conf" ''
     listen-address  ${config.services.privoxy.listenAddress}