diff --git a/hosts/wynne/services/apps/ntfy.nix b/hosts/wynne/services/apps/ntfy.nix
index dd4c936..49d4d21 100644
--- a/hosts/wynne/services/apps/ntfy.nix
+++ b/hosts/wynne/services/apps/ntfy.nix
@@ -33,7 +33,14 @@ in
       settings = {
         base-url = "https://${domainName}";
         listen-http = "127.0.0.1:8080";
+        auth-file = "/mnt/data/ntfy-sh/user.db";
+        attachment-cache-dir = "/mnt/data/ntfy-sh/attachments";
+        cache-file = "/mnt/data/ntfy-sh/cache-file.db";
+
+        auth-default-access = "deny-all";
       };
     };
   };
+  systemd.services.ntfy-sh.unitConfig.RequiresMountsFor = [ "/mnt/data" ];
+  systemd.services.ntfy-sh.serviceConfig.WorkingDirectory = [ "/mnt/data/ntfy-sh" ];
 }