diff --git a/debian/taler-exchange.postinst b/debian/taler-exchange.postinst
index ae7336183..67672bde0 100644
--- a/debian/taler-exchange.postinst
+++ b/debian/taler-exchange.postinst
@@ -9,6 +9,7 @@ CONFIG_FILE="/etc/default/taler-exchange"
 _GROUPNAME=taler-exchange-secmod
 _DBGROUPNAME=taler-exchange-db
 _EUSERNAME=taler-exchange-httpd
+_CLOSERUSERNAME=taler-exchange-closer
 _RSECUSERNAME=taler-exchange-secmod-rsa
 _ESECUSERNAME=taler-exchange-secmod-eddsa
 _AGGRUSERNAME=taler-exchange-aggregator
@@ -56,6 +57,10 @@ configure)
     adduser --quiet --system --home ${TALER_HOME}/wire ${_WIREUSERNAME}
     adduser --quiet ${_WIREUSERNAME} ${_DBGROUPNAME}
   fi
+  if ! getent passwd ${_CLOSERUSERNAME} >/dev/null; then
+    adduser --quiet --system --home ${TALER_HOME}/closer ${_CLOSERUSERNAME}
+    adduser --quiet ${_CLOSERUSERNAME} ${_DBGROUPNAME}
+  fi
   if ! getent passwd ${_AGGRUSERNAME} >/dev/null; then
     adduser --quiet --system --home ${TALER_HOME}/aggregator ${_AGGRUSERNAME}
     adduser --quiet ${_AGGRUSERNAME} ${_DBGROUPNAME}
@@ -68,6 +73,7 @@ configure)
   lncfg ${_RSECUSERNAME} secmod-rsa /etc/taler/exchange-service-default.conf
   lncfg ${_ESECUSERNAME} secmod-eddsa /etc/taler/exchange-service-default.conf
   lncfg ${_AGGRUSERNAME} aggregator /etc/taler/exchange-service-default.conf
+  lncfg ${_CLOSERUSERNAME} closer /etc/taler/exchange-service-default.conf
   lncfg ${_WIREUSERNAME} wire /etc/taler/exchange-service-wire.conf
   ;;