diff --git a/nix/dev-vm.nix b/nix/dev-vm.nix
index 683a630..d5f13a8 100644
--- a/nix/dev-vm.nix
+++ b/nix/dev-vm.nix
@@ -109,6 +109,10 @@
       gnutar
       gzip
     ];
+
+    serviceConfig = {
+      ReadWritePaths = [ "/var/www/archtika-websites" ];
+    };
   };
 
   services.getty.autologinUser = "dev";
diff --git a/nix/module.nix b/nix/module.nix
index b95dabc..f5e17d6 100644
--- a/nix/module.nix
+++ b/nix/module.nix
@@ -162,7 +162,6 @@ in
           Group = cfg.group;
           Restart = "always";
           WorkingDirectory = "${cfg.package}/rest-api";
-
           RestrictAddressFamilies = [
             "AF_INET"
             "AF_INET6"
@@ -208,7 +207,6 @@ in
           Group = cfg.group;
           Restart = "always";
           WorkingDirectory = "${cfg.package}/web-app";
-
           RestrictAddressFamilies = [
             "AF_INET"
             "AF_INET6"
@@ -236,8 +234,13 @@ in
         extensions = ps: with ps; [ pgjwt ];
       };
 
-      systemd.services.postgresql.path = builtins.attrValues {
-        inherit (pkgs) gnutar gzip;
+      systemd.services.postgresql = {
+        path = builtins.attrValues {
+          inherit (pkgs) gnutar gzip;
+        };
+        serviceConfig = {
+          ReadWritePaths = [ "/var/www/archtika-websites" ];
+        };
       };
 
       services.nginx = {