diff --git a/backup.nix b/backup.nix
index 1b11f75..b6a7972 100644
--- a/backup.nix
+++ b/backup.nix
@@ -98,21 +98,30 @@ in {
     wants = [ "network-online.target" ];
     requires = [ "postgresql.service" ];
 
-    unitConfig.OnFailure = let
-      script = pkgs.writeScript "misskey-backup-failure" ''
-        invocationId="$(systemctl show --value -p InvocationID misskey-backup.service)"
-        logs="$(journalctl _SYSTEMD_INVOCATION_ID= -u misskey-backup.service)"
+    unitConfig.OnFailure = "misskey-backup-failure.service";
+  };
 
-        ${notifyError} "backup" "Misskey Backup Failure Notification" "$(<<EOMSG
-        A backup process has failed. Logs to follow:
+  systemd.services.misskey-backup-failure = {
+    description = "Misskey backup failure notification";
 
-        $logs
+    serviceConfig.User = user;
+    serviceConfig.Type = "oneshot";
 
-        EOMSG
-        )
-        "
-      '';
-    in "${script}";
+    script = ''
+      invocationId="$(systemctl show --value -p InvocationID misskey-backup.service)"
+      logs="$(journalctl _SYSTEMD_INVOCATION_ID= -u misskey-backup.service)"
+
+      ${notifyError} "backup" "Misskey Backup Failure Notification" "$(<<EOMSG
+      A backup process has failed. Logs to follow:
+
+      $logs
+
+      EOMSG
+      )
+      "
+    '';
+
+    requires = [ "postfix.service" ];
   };
 
   systemd.timers.misskey-backup = { timerConfig.Persistent = true; };