diff --git a/hosts/nixos/lapetus/services/forgejo.nix b/hosts/nixos/lapetus/services/forgejo.nix
index 9e6399f..aa8b526 100644
--- a/hosts/nixos/lapetus/services/forgejo.nix
+++ b/hosts/nixos/lapetus/services/forgejo.nix
@@ -2,10 +2,12 @@
 let
   port = 8419;
   host = "git.moonythm.dev";
+  cfg = config.services.forgejo;
 in
 {
   sops.secrets.forgejo_mail_password.sopsFile = ../secrets.yaml;
   satellite.cloudflared.targets.${host}.port = port;
+  systemd.tmpfiles.rules = [ "d ${cfg.stateDir} 0700 ${cfg.user} ${cfg.user} -" ];
 
   services.forgejo = {
     enable = true;
diff --git a/hosts/nixos/tethys/default.nix b/hosts/nixos/tethys/default.nix
index 294692d..b19a034 100644
--- a/hosts/nixos/tethys/default.nix
+++ b/hosts/nixos/tethys/default.nix
@@ -16,7 +16,6 @@
     ./hardware
     ./boot.nix
     ./services/syncthing.nix
-    ./services/forgejo.nix
   ];
   # }}}