diff --git a/nixos/modules/services/networking/solanum.nix b/nixos/modules/services/networking/solanum.nix
index ffdaba5de246..d21056a2e9d5 100644
--- a/nixos/modules/services/networking/solanum.nix
+++ b/nixos/modules/services/networking/solanum.nix
@@ -12,7 +12,6 @@ let
     mkOption
     types
     ;
-  inherit (pkgs) solanum util-linux;
   cfg = config.services.solanum;
 
   configFile = pkgs.writeText "solanum.conf" cfg.config;
@@ -104,12 +103,28 @@ in
             configFile
           ];
           serviceConfig = {
-            ExecStart = "${solanum}/bin/solanum -foreground -logfile /dev/stdout -configfile /etc/solanum/ircd.conf -pidfile /run/solanum/ircd.pid";
-            ExecReload = "${util-linux}/bin/kill -HUP $MAINPID";
+            ExecStart = toString [
+              (lib.getExe pkgs.solanum)
+              "-foreground"
+              "-logfile"
+              "/dev/stdout"
+              "-configfile"
+              "/etc/solanum/ircd.conf"
+              "-pidfile"
+              "/run/solanum/ircd.pid"
+            ];
+            ExecReload = toString [
+              (lib.getExe' pkgs.util-linux "kill")
+              "-HUP"
+              "$MAINPID"
+            ];
             DynamicUser = true;
             User = "solanum";
             StateDirectory = "solanum";
+            StateDiectoryMode = "0750";
             RuntimeDirectory = "solanum";
+            RuntimeDirectoryMode = "0700";
+            UMask = "0027";
             LimitNOFILE = "${toString cfg.openFilesLimit}";
           };
         };