diff --git a/modules/server/containers/apps/freshrss.nix b/modules/server/containers/apps/freshrss.nix
index 62009ba..1eb3109 100644
--- a/modules/server/containers/apps/freshrss.nix
+++ b/modules/server/containers/apps/freshrss.nix
@@ -43,12 +43,13 @@ in {
     envFile = [ config.sops.secrets."FRESHRSS".path config.sops.secrets."CUSTOM".path];
     script = pkgs.writeShellScript "setup-freshrss" ''
 
-      RSS="${pkgs.podman}/bin/podman --events-backend=none exec freshrss-server"
+      RSS="${pkgs.podman}/bin/podman --events-backend=none exec -u www-data freshrss-server"
       $RSS ./cli/prepare.php
       $RSS ./cli/do-install.php --default-user $DEFAULT_ADMIN_USERNAME --auth-type http_auth --base-url https://${containerCfg.subdomain}.${serverCfg.domain} --language en \
         --title RSS --api-enabled --db-type pgsql --db-host ${builder.host} --db-user freshrss_user --db-password $DB_PASSWORD --db-base freshrss_db
-      $RSS ./cli/reconfigure.php
       $RSS ./cli/create-user.php --user $DEFAULT_ADMIN_USERNAME --password $DEFAULT_ADMIN_PASSWORD --email $DEFAULT_ADMIN_EMAIL
+      $RSS ./cli/reconfigure.php
+      $RSS ./cli/access-permissions.sh
       
     '';
   };