diff --git a/hosts/radiobert/readsb.nix b/hosts/radiobert/readsb.nix
index 9c5c6b9f..feb30fc0 100644
--- a/hosts/radiobert/readsb.nix
+++ b/hosts/radiobert/readsb.nix
@@ -5,31 +5,36 @@
     # no watching TV intended
     "dvb_usb_rtl28xxu"
   ];
-  users.users.dump1090 = {
+  users.users.readsb = {
     isSystemUser = true;
-    group = "dump1090";
+    group = "adsb";
   };
-  users.groups.dump1090 = {};
+  users.groups.adsb = {};
   systemd.services.readsb = {
     wantedBy = [ "multi-user.target" ];
     serviceConfig = {
       ExecStart = "${pkgs.readsb}/bin/readsb --modeac --aggressive --dcfilter --quiet --gain=-10 --lon=13.7281 --lat=51.081 --net --net-sbs-port=30003";
-      User = "dump1090";
-      Group = "dump1090";
+      User = "readsb";
+      Group = "adsb";
       ProtectSystem = "full";
       ProtectHome = true;
       Restart = "always";
       RestartSec = "10s";
     };
   };
+
+  users.users.sbs2json = {
+    isSystemUser = true;
+    group = "adsb";
+  };
   # SHIM because readsb has no web server like dump1090
   systemd.services.sbs2json = {
     wantedBy = [ "multi-user.target" ];
     requires = [ "readsb.service" ];
     serviceConfig = {
       ExecStart = "${pkgs.ruby}/bin/ruby ${./sbs2json.rb}";
-      User = "dump1090";
-      Group = "dump1090";
+      User = "sbs2json";
+      Group = "adsb";
       ProtectSystem = "full";
       ProtectHome = true;
       Restart = "always";
@@ -39,7 +44,7 @@
 
   users.users.dump1090-influxdb = {
     isSystemUser = true;
-    group = "dump1090";
+    group = "adsb";
   };
   systemd.services.dump1090-influxdb = {
     wantedBy = [ "multi-user.target" ];
@@ -47,7 +52,7 @@
     serviceConfig = {
       ExecStart = "${pkgs.dump1090-influxdb}/bin/dump1090-influxdb";
       User = "dump1090-influxdb";
-      Group = "dump1090";
+      Group = "adsb";
       ProtectSystem = "full";
       ProtectHome = true;
       Restart = "always";