diff --git a/playbook.yml b/playbook.yml
index d1c9dd7..4bd8c08 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -485,11 +485,21 @@
       become: true
       become_user: root
 
+    - name: create dotfiles user
+      user:
+        name: dotfiles
+        home: /var/lib/dotfiles
+        create_home: false
+        shell: /bin/bash
+        system: true
+      become: true
+      become_user: root
+
     - name: create dotfiles directory
       file:
         state: directory
         path: /var/lib/dotfiles
-        owner: nobody
+        owner: dotfiles
         group: dotfiles
         mode: '0775' # group needs write access!
       become: true