This is actually automatically done for the service from the apt package, but I like specifying it explicitly as well.