diff --git a/rabbitmq.nix b/rabbitmq.nix
index ca5eee9..9039bd9 100644
--- a/rabbitmq.nix
+++ b/rabbitmq.nix
@@ -1,11 +1,25 @@
 { lib, config, pkgs, ... }:
 
+let
+  cookie = "dontusethisinprod";
+  setup = pkgs.writeScriptBin "setup-rabbitmq.sh" ''
+  rabbitmqctl --erlang-cookie "${cookie}" add_user admin_user password
+  rabbitmqctl --erlang-cookie "${cookie}" set_user_tags admin_user administrator
+  rabbitmqctl --erlang-cookie "${cookie}" set_permissions -p / admin_user ".*" ".*" ".*"
+
+  rabbitmqctl --erlang-cookie "${cookie}" add_user reddit_user password
+  rabbitmqctl --erlang-cookie "${cookie}" set_permissions -p / reddit_user ".*" ".*" ".*"
+  '';
+in
 {
   services.rabbitmq = {
     enable = true;
     listenAddress = "0.0.0.0";
     managementPlugin.enable = true;
+    cookie = "dontusethisinprod";
   };
   networking.firewall.allowedTCPPorts = [ 5672 15672 ];
+
+  environment.systemPackages = [ setup ];
 }