diff --git a/services/immich.nix b/services/immich.nix
index 4b4d4c6..b059254 100644
--- a/services/immich.nix
+++ b/services/immich.nix
@@ -17,7 +17,7 @@
   };
 
   systemd.tmpfiles.rules = [
-    "d ${config.services.immich.mediaLocation} 0755 ${config.services.immich.user} ${config.services.immich.group}"
+    "d ${config.services.immich.mediaLocation} 0750 ${config.services.immich.user} ${config.services.immich.group}"
   ];
 
   environment.systemPackages = with pkgs; [