diff --git a/modules/etesync.nix b/modules/etesync.nix
index 3d4f014..6fd8982 100644
--- a/modules/etesync.nix
+++ b/modules/etesync.nix
@@ -1,5 +1,9 @@
 { ... }:
 {
+  systemd.tmpfiles.rules = [
+    "f /run/agenix/etebase 0600 etebase-server etebase-server -"
+  ];
+
   services = {
     etebase-server = {
       enable = true;