diff --git a/systems/ceres/config/comfyui.nix b/systems/ceres/config/comfyui.nix
index a531d16..4a8a209 100755
--- a/systems/ceres/config/comfyui.nix
+++ b/systems/ceres/config/comfyui.nix
@@ -66,8 +66,8 @@ in
     ];
   };
   systemd.tmpfiles.rules = [
-    "Z ${service.paths.path0} 755 root root -"
-    "Z ${service.sops.path0}/models 755 ${service.name} ${service.name} -"
+    "Z ${service.paths.path0}/models 755 root root -"
+    "Z ${service.sops.path0} 755 caddy caddy -"
   ];
 
   users.users.${service.name}.extraGroups = [