diff --git a/modules/global/persist.nix b/modules/global/persist.nix
index 6fcc420..2ad0943 100644
--- a/modules/global/persist.nix
+++ b/modules/global/persist.nix
@@ -12,7 +12,7 @@ in
       "/var/log"
       "/var/lib/nixos"
       "/var/lib/systemd/coredump"
-      "/var/lib/tailscale"
+      { directory = "/var/lib/tailscale"; mode = "0700"; }
 
       "/root/.ssh"