diff --git a/hosts/jupiter/default.nix b/hosts/jupiter/default.nix
index cae25a6..716540a 100644
--- a/hosts/jupiter/default.nix
+++ b/hosts/jupiter/default.nix
@@ -55,8 +55,9 @@
   users.groups.storage = { };
 
   systemd.tmpfiles.rules = [
-    "v /mnt/storage/public 0770 root storage"
-    "v /mnt/storage/private 0755 root root"
+    "v  /mnt/storage/public  2770 root storage - -"
+    "a+ /mnt/storage/public  -    -    -       - d:g:storage:rwx"
+    "v  /mnt/storage/private 0755 root root    - -"
   ];
 
   users.users.root.openssh.authorizedKeys.keys = [