diff --git a/cluster/services/storage/default.nix b/cluster/services/storage/default.nix
index a0ebb8d..d69aeec 100644
--- a/cluster/services/storage/default.nix
+++ b/cluster/services/storage/default.nix
@@ -11,6 +11,7 @@ in
 
   services.storage = {
     nodes = {
+      internal = lib.subtractLists config.services.storage.nodes.external (lib.attrNames depot.gods.fromLight);
       external = [ "prophet" ];
       heresy = [ "VEGAS" ];
       garage = [ "grail" "prophet" "VEGAS" ];
@@ -19,6 +20,9 @@ in
       garageExternal = [ "grail" "prophet" ];
     };
     nixos = {
+      internal = [
+        ./internal.nix
+      ];
       external = [
         ./external.nix
         ./s3ql-upgrades.nix
diff --git a/cluster/services/storage/internal.nix b/cluster/services/storage/internal.nix
new file mode 100644
index 0000000..52d2c01
--- /dev/null
+++ b/cluster/services/storage/internal.nix
@@ -0,0 +1,12 @@
+{ ... }:
+
+let
+  storageDir = "/srv/storage";
+in
+
+{
+  systemd.tmpfiles.settings."00-storage" = {
+    "${storageDir}".d.mode = "0755";
+    "${storageDir}/private".d.mode = "0751";
+  };
+}