diff --git a/backup.nix b/backup.nix
index 8ad5a78..b74d6b5 100644
--- a/backup.nix
+++ b/backup.nix
@@ -1,11 +1,18 @@
 { config, pkgs, ... }:
 
+#necessary prep work:
+# GRANT CONNECT ON DATABASE misskey TO "misskey-backup";
+# GRANT SELECT ON ALL TABLES IN SCHEMA public TO "misskey-backup";
+# GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "misskey-backup";
+#
+# TODO: automate this cause it needs to be done whenever db schema changes
 let
   user = "misskey-backup";
   group = user;
 
   # shell script file to be sourced. must have values "MISSKEY_BACKUP_BUCKET" "MISSKEY_BACKUP_PREFIX" and "S3CFG"
-  backupConfigFile = "/etc/misskey-backup";
+  # $S3CFG must be a path to a .s3cfg file compatible with s3cmd
+  backupConfigFile = "/etc/misskey-backup/conf";
   backupScript = pkgs.writeShellApplication {
     name = "misskey-backup";