diff --git a/nixos/modules/impermanence/default.nix b/nixos/modules/impermanence/default.nix
index 8130885..fc1a6dc 100644
--- a/nixos/modules/impermanence/default.nix
+++ b/nixos/modules/impermanence/default.nix
@@ -19,9 +19,9 @@
 	];
     };
     systemd.tmpfiles.rules = {
-	"d /persist/home/ 1777 root root -" # /persist/home created, owned by root
-	"d /persist/home/${username} 0770 ${username} users -" # /persist/home/<user> created, owned by that user
-	"d /persist/nixos-config/ 0770 ${username} users -"
+	"d /persist/home/ 0777 root root -" # /persist/home created, owned by root
+	"d /persist/home/${username} 0700 ${username} users -" # /persist/home/<user> created, owned by that user
+	"d /persist/nixos-config/ 0700 ${username} users -"
     }
 
     programs.fuse.userAllowOther = true;