diff --git a/modules/nixos/services/podgrab/default.nix b/modules/nixos/services/podgrab/default.nix
index 3ff86db..d0b2df8 100644
--- a/modules/nixos/services/podgrab/default.nix
+++ b/modules/nixos/services/podgrab/default.nix
@@ -51,21 +51,21 @@ in
       );
     };
 
-  # fileSystems."/var/lib/${service.name}" = {
-  #   device = service.paths.path0;
-  #   fsType = "none";
-  #   options = [
-  #     "bind"
-  #   ];
-  #   depends = [
-  #     ceres.storage0.mount
-  #   ];
-  # };
+  fileSystems."/var/lib/${service.name}" = {
+    device = service.paths.path0;
+    fsType = "none";
+    options = [
+      "bind"
+    ];
+    depends = [
+      ceres.storage0.mount
+    ];
+  };
 
-  # systemd.tmpfiles.rules = [
-  #   "Z ${service.paths.path0} 0755 ${service.name} ${service.name} -"
-  #   "Z ${service.sops.path0} 0755 ${service.name} ${service.name} -"
-  # ];
+  systemd.tmpfiles.rules = [
+    "Z ${service.paths.path0} 0755 ${service.name} ${service.name} -"
+    "Z ${service.sops.path0} 0755 ${service.name} ${service.name} -"
+  ];
 
   networking = {
     firewall = {
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 3d45502..fd5a283 100755
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -36,7 +36,7 @@ wireguard-CA358: ENC[AES256_GCM,data:/VewmiNfRc9/wSE7TT+z1F9LLIvr/5wPsQZ/zBwAh3d
 wireguard-CA627: ENC[AES256_GCM,data:chmDsH2nE0nagjFRZWuxX08/Ykt+rIgCHYkMHd+7nIqihK5SebF7MJlrp84=,iv:NVOlGE7W70nQ0UM/i5WixJvDULO3Y4cLf8h+OAGHhQQ=,tag:L123ShCnr9+kIg1itIoqBA==,type:str]
 glance-jellyfin: ENC[AES256_GCM,data:ozdDKgAWkA88J2j8RtiOP/aQPAt/neUOSlAZF20g510=,iv:x+VhYlnA9F/VPrzVcma4/oPelCc8kjWoTZvOs4L9Uqo=,tag:crdSDjr8Y5GH/JAF6t8Yeg==,type:str]
 kanboard-smtp: ENC[AES256_GCM,data:eOIEGwJZlvbJaTfDRU3IFQ==,iv:Jex01WlHG3uxqUnTSF+v1BgnNcIu4cS9OwHBCFl1m28=,tag:3Eld1FkI6AftlCyC3419BA==,type:str]
-podgrab-pass: ENC[AES256_GCM,data:Dg2eI0+yufvwfs6b3iNXtuyZR0ivL4U5LeC23isHZO4=,iv:ORB8xIBnNeJ6eQvm6Gb972Qv5xxY+cldwfUNYXaz6GA=,tag:ANAC/oyF6hqOGopYvpzaPQ==,type:str]
+podgrab-pass: ENC[AES256_GCM,data:DVmJDb4VqcZDKNcedSaRA5dqKOzx1tSzDiK3i23+a6v3nK+4Kh7n8EA=,iv:SiiUjJLHkCOO1VKCmubftKx06laFqNv79tIPnkVYrJU=,tag:kdkT+03DemlNAsuzps8fnw==,type:str]
 sops:
     age:
         - recipient: age19dpncsdphdt2tmknjs99eghk527pvdrw0m29qjn2z2gg3et5tdtqycqhl0
@@ -48,7 +48,7 @@ sops:
             bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD
             aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-22T16:48:14Z"
-    mac: ENC[AES256_GCM,data:qmfkuAvJuDSyWRFuEyp1Kb2Ba4QrMAHN1WrMaN3FIbpEm/jWAw6yyEiZ5fEwr5XMkBczjkg7ioG+IFf28I6TEgZVrgAv3NKm2wkIw2SCU0Fo7+s5Hbv4vT0pra6rHwL+b9ND6K32Z7hbanGytqLtv99Y9YxyVplzPaEIa0CP4v0=,iv:1lU5vKoAV4vr1lFv1dxqJrGu5fUsQQtzsSKOc+BhnVA=,tag:r/7gli4X5UpejJTe6UQywQ==,type:str]
+    lastmodified: "2025-06-22T17:49:20Z"
+    mac: ENC[AES256_GCM,data:xaNgww0DTuVdPtVy9oTmn0HKmDKpiOnjFnSBjJ7YxqV8R2c+VWEnA6P1vBrR5L9xG/nXvBhMm7XMOA/z0eZRWM2CfjNyrk6KOFyLArvJLyzj8zRZThe6rFNAiSjndwVNBHtYSYid3Bisupuagp1HuYXK1JDlgc9a93c7rlbG1OI=,iv:OBl0hhf0T+I7FuXAkgUrJOkJHN2H0LR+JKp1KsyyMD0=,tag:+PE51+dUw9erKChmvl6j/w==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2