diff --git a/modules/mcaptcha.nix b/modules/mcaptcha.nix
index 64b708dd..e924a3e2 100644
--- a/modules/mcaptcha.nix
+++ b/modules/mcaptcha.nix
@@ -262,14 +262,11 @@ in {
       ensureUsers = [
         {
           name = cfg.user;
+          ensureDBOwnership = true;
         }
       ];
     };
 
-    systemd.services.postgresql.postStart = lib.mkIf cfg.database.createLocally (lib.mkAfter ''
-      $PSQL ${cfg.settings.database.name} -c 'GRANT ALL PRIVILEGES ON SCHEMA public TO "${cfg.user}"'
-    '');
-
     services.redis.servers.mcaptcha = lib.mkIf cfg.redis.createLocally {
       enable = true;
       port = cfg.redis.port;