diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5223255f105bc1dd0afb6f5fb2af43738070b904..2be34afcd1ee3752a9af3507cf35a69f6841ca69 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1 +1 @@
-include: "https://git.autistici.org/ai3/build-deb/raw/master/ci-buster-backports.yml"
+include: "https://git.autistici.org/ai3/build-deb/raw/master/ci-nextstable.yml"
diff --git a/debian/control b/debian/control
index 2a362ecb208ae40153f9afefb1a559c0de5ad137..685540daaa18b66ad9b53bd0f8f3745f4dba04ff 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: float-debug-proxy
 Section: net
 Priority: optional
 Maintainer: Autistici/Inventati <debian@autistici.org>
-Build-Depends: debhelper-compat (= 12), golang-any (>= 1.11), dh-golang
+Build-Depends: debhelper-compat (= 13), golang-any (>= 1.11), dh-golang
 Standards-Version: 3.9.6
 XS-Go-Import-Path: git.autistici.org/ai3/tools/float-debug-proxy
 
diff --git a/debian/float-debug-proxy.service b/debian/float-debug-proxy.service
index 121d7d7f79cfe7f516c590170a48d1177e87bb96..a55adc726e45c2c26ec853c9e7dd050559a6b7f7 100644
--- a/debian/float-debug-proxy.service
+++ b/debian/float-debug-proxy.service
@@ -6,7 +6,7 @@ After=network.target
 Type=simple
 ExecStart=/usr/bin/float-debug-proxy
 Restart=on-failure
-User=nobody
+User=float-debug-proxy
 
 NoNewPrivileges=yes
 PrivateTmp=yes
diff --git a/debian/float-debug-proxy.sysusers b/debian/float-debug-proxy.sysusers
new file mode 100644
index 0000000000000000000000000000000000000000..6403085149d0ef6d1bb73f8782d452d35febe0cc
--- /dev/null
+++ b/debian/float-debug-proxy.sysusers
@@ -0,0 +1 @@
+u float-debug-proxy - -
diff --git a/debian/rules b/debian/rules
index 1656b28a64040a1233aa3fe25f71df4083975895..505c570fecf9b1c336cabea7368d42cb6d7e2060 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,10 @@ export DH_GOLANG_EXCLUDES = vendor
 %:
 	dh $@ --with golang --buildsystem golang
 
+override_dh_installsystemd:
+	dh_installsysusers
+	dh_installsystemd
+
 override_dh_auto_test:
 
 override_dh_auto_install: