diff --git a/services/nginx.spec b/services/nginx.spec
index e663ce8..6eb31aa 100644
--- a/services/nginx.spec
+++ b/services/nginx.spec
@@ -3,6 +3,7 @@ consumes: http?
 provides: www, http
 ports: http=80, https=443
 reload-command: kill -HUP ${SERVICE_PID}
+user: root
 
 %configuration nginx.conf
 
diff --git a/templates/nginx.conf.j2 b/templates/nginx.conf.j2
index 12138da..de007c4 100644
--- a/templates/nginx.conf.j2
+++ b/templates/nginx.conf.j2
@@ -2,6 +2,8 @@
 # worker_processes  1;
 daemon off;
 
+user {{ service.user }};
+
 pid {{ service.root }}/pid;
 
 worker_rlimit_nofile 1024;