diff --git a/hosts/common/programs/dialect.nix b/hosts/common/programs/dialect.nix
index 7c1c854f1..febb799ca 100644
--- a/hosts/common/programs/dialect.nix
+++ b/hosts/common/programs/dialect.nix
@@ -2,6 +2,9 @@
 {
   sane.programs.dialect = {
     sandbox.method = "bwrap";
+    sandbox.extraHomePaths = [
+      ".config/dconf"  # to persist settings
+    ];
 
     packageUnwrapped = pkgs.dialect.overrideAttrs (upstream: {
       # TODO: send upstream
@@ -11,8 +14,5 @@
         pkgs.glib-networking  # for TLS
       ];
     });
-
-    # dialect reads settings via dconf
-    fs.".config/dconf" = {};
   };
 }
diff --git a/hosts/common/programs/g4music.nix b/hosts/common/programs/g4music.nix
index 2d653727b..f739ddbd0 100644
--- a/hosts/common/programs/g4music.nix
+++ b/hosts/common/programs/g4music.nix
@@ -9,7 +9,9 @@
 {
   sane.programs.g4music = {
     sandbox.method = "bwrap";
-    fs."Music" = {};
+    sandbox.extraHomePaths = [
+      "Music"
+    ];
 
     persist.byStore.plaintext = [
       # index?