diff --git a/knot-resolver.spec b/knot-resolver.spec
index 35809b2..79e410a 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -6,7 +6,7 @@
 %define NINJA ninja-build
 
 Name:           knot-resolver
-Version:        5.7.4
+Version:        5.7.6
 Release:        1%{?dist}
 Summary:        Caching full DNS Resolver
 
@@ -53,7 +53,7 @@ Requires:       systemd
 Requires(post): systemd
 
 # dnstap module dependencies
-# SUSE is missing protoc-c protobuf compiler
+# SUSE is missing protoc protobuf compiler
 %if "x%{?suse_version}" == "x"
 BuildRequires:  pkgconfig(libfstrm)
 BuildRequires:  pkgconfig(libprotobuf-c)
@@ -66,7 +66,6 @@ BuildRequires:  lmdb-devel
 Requires:       lua-basexx
 Requires:       lua-psl
 Requires:       lua-http
-Requires(pre):  shadow-utils
 %endif
 %if 0%{?fedora} || 0%{?rhel} > 7
 BuildRequires:  pkgconfig(lmdb)
@@ -75,7 +74,6 @@ Requires:       lua5.1-basexx
 Requires:       lua5.1-cqueues
 Requires:       lua5.1-http
 Recommends:     lua5.1-psl
-Requires(pre):  shadow-utils
 %endif
 
 # we do not build HTTP module on SuSE so the build requires is not needed
@@ -167,6 +165,11 @@ gpg2 --verify %{SOURCE1} %{SOURCE0}
 %endif
 %setup -q -n %{name}-%{version}
 
+# Create a sysusers.d config file
+cat >knot-resolver.sysusers.conf <<EOF
+u knot-resolver - 'Knot Resolver' %{_sysconfdir}/knot-resolver -
+EOF
+
 %build
 CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \
 %if "x%{?rhel}" == "x"
@@ -224,10 +227,9 @@ install -m 755 -d %{buildroot}/%{_pkgdocdir}
 mv %{buildroot}/%{_datadir}/doc/%{name}/* %{buildroot}/%{_pkgdocdir}/
 %endif
 
-%pre
-getent group knot-resolver >/dev/null || groupadd -r knot-resolver
-getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver
+install -m0644 -D knot-resolver.sysusers.conf %{buildroot}%{_sysusersdir}/knot-resolver.conf
 
+%pre
 %if "x%{?rhel}" == "x"
 # upgrade-4-to-5
 if [ -f %{_unitdir}/kresd.socket ] ; then
@@ -315,7 +317,6 @@ fi
 %{_sbindir}/kresc
 %{_sbindir}/kres-cache-gc
 %{_libdir}/libkres.so.*
-%dir %{_libdir}/knot-resolver
 %{_libdir}/knot-resolver/*.so
 %{_libdir}/knot-resolver/*.lua
 %dir %{_libdir}/knot-resolver/kres_modules
@@ -349,6 +350,7 @@ fi
 %{_libdir}/knot-resolver/kres_modules/watchdog.lua
 %{_libdir}/knot-resolver/kres_modules/workarounds.lua
 %{_mandir}/man8/kresd.8.gz
+%{_sysusersdir}/knot-resolver.conf
 
 %files devel
 %{_includedir}/libkres
@@ -378,6 +380,16 @@ fi
 %endif
 
 %changelog
+* Fri Jul 18 2025 Jakub Ružička <jakub.ruzicka@nic.cz> - 5.7.6-1
+- New upstream version 5.7.6
+
+* Thu Apr 24 2025 Jakub Ružička <jakub.ruzicka@nic.cz> - 5.7.5-1
+- New upstream version 5.7.5
+- Remove duplicate file listing
+
+* Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.7.4-4
+- Add sysusers.d config file to allow rpm to create users/groups automatically
+
 * Wed Jul 24 2024 Jakub Ružička <jakub.ruzicka@nic.cz> - 5.7.4-1
 - New upstream version 5.7.4
 
diff --git a/sources b/sources
index 9f73da1..0ed2cdf 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-5.7.4.tar.xz) = 5d8ea5b5b0cba5a1058aaa6e04573c838895d6b2c204e8d09c9ad898fb074c52ef7589afdad164b007edf151167d31fd0f940466edfeec597f96e5bc1cd72171
-SHA512 (knot-resolver-5.7.4.tar.xz.asc) = d34a0e1fd8be372c325199ace5bb6f20b2b395a4fb5a6f6f4c2c89f29741ecfd36234900b0e836c174df831716012589231551b13426a6728e37aba6c74c197f
+SHA512 (knot-resolver-5.7.6.tar.xz) = 4dcaff56b0368bc147e04ffbf6ce4a3595fa3a59e99e73b516edc7813142abcb20823b987824b11a31e3eca3cc62fa176caf4408361daeac67b6f0587f9a0268
+SHA512 (knot-resolver-5.7.6.tar.xz.asc) = 478449d96dddaff9aff134a2a3bc991d8e50423f38a00e7256b54be9ab89d85d66eaa8e83815f4b31700b16fd94f8017493db6347e57d0583feec38bb35655f6