diff --git a/hosts/servo/services/matrix/signal.nix b/hosts/servo/services/matrix/signal.nix
index 3034d772..ecf480ff 100644
--- a/hosts/servo/services/matrix/signal.nix
+++ b/hosts/servo/services/matrix/signal.nix
@@ -18,6 +18,10 @@
     ReadWritePaths = [ "/run/signald" ];
   };
 
+  sane.persist.sys.plaintext = [
+    { user = "mautrix-signal"; group = "mautrix-signal"; directory = "/var/lib/mautrix-signal"; }
+  ];
+
   sops.secrets.mautrix_signal_env = {
     sopsFile = ../../../../secrets/servo/mautrix_signal_env.bin;
     format = "binary";