diff --git a/services/neko.nix b/services/neko.nix
index db5cb5f..8bd501f 100644
--- a/services/neko.nix
+++ b/services/neko.nix
@@ -36,7 +36,10 @@ in
 
     systemd.tmpfiles.rules = [
       "d /var/lib/neko      0755 root root -"
-      "d /var/lib/neko/home 0755 root root -"
+      # The container's neko user is uid/gid 1000 and must own its home, or the
+      # X server / Xfce can't create ~/.config, ~/.cache, etc. and the desktop
+      # never starts.
+      "d /var/lib/neko/home 0755 1000 1000 -"
     ];
 
     systemd.services.neko = {