diff --git a/backup.nix b/backup.nix
index c10c2cd..1b11f75 100644
--- a/backup.nix
+++ b/backup.nix
@@ -98,19 +98,21 @@ in {
     wants = [ "network-online.target" ];
     requires = [ "postgresql.service" ];
 
-    unitConfig.OnFailure = ''
-      invocationId="$(systemctl show --value -p InvocationID misskey-backup.service)"
-      logs="$(journalctl _SYSTEMD_INVOCATION_ID= -u misskey-backup.service)"
+    unitConfig.OnFailure = let
+      script = pkgs.writeScript "misskey-backup-failure" ''
+        invocationId="$(systemctl show --value -p InvocationID misskey-backup.service)"
+        logs="$(journalctl _SYSTEMD_INVOCATION_ID= -u misskey-backup.service)"
 
-      ${notifyError} "backup" "Misskey Backup Failure Notification" "$(<<EOMSG
-      A backup process has failed. Logs to follow:
+        ${notifyError} "backup" "Misskey Backup Failure Notification" "$(<<EOMSG
+        A backup process has failed. Logs to follow:
 
-      $logs
+        $logs
 
-      EOMSG
-      )
-      "
-    '';
+        EOMSG
+        )
+        "
+      '';
+    in "${script}";
   };
 
   systemd.timers.misskey-backup = { timerConfig.Persistent = true; };