diff --git a/config/hosts/plato.nix b/config/hosts/plato.nix
index d0dc36c..332d62b 100644
--- a/config/hosts/plato.nix
+++ b/config/hosts/plato.nix
@@ -21,6 +21,14 @@ with lib; {
       Defaults lecture = never
     '';
 
+    systemd.tmpfiles.rules = [
+      "L /root/.gnupg - - - - /state/root/gnupg"
+      "L /root/.emacs.d - - - - /state/root/emacs.d"
+      "L /root/.ssh/id_rsa - - - - /state/root/ssh/id_rsa"
+      "L /root/.ssh/id_rsa.pub - - - - /state/root/ssh/id_rsa.pub"
+      "L /root/.ssh/known_hosts - - - - /state/root/ssh/known_hosts"
+    ];
+
     services = {
       openssh = {
         hostKeys = [
diff --git a/home-manager/root.nix b/home-manager/root.nix
index faf770a..35923b5 100644
--- a/home-manager/root.nix
+++ b/home-manager/root.nix
@@ -38,11 +38,4 @@ in {
       HISTCONTROL = "ignoredups:ignorespace";
     };
   };
-
-  systemd.user.tmpfiles.rules = [
-    "L /root/.gnupg - - - - /state/root/gnupg"
-    "L /root/.emacs.d - - - - /state/root/emacs.d"
-    "L /root/.ssh/id_rsa - - - - /state/root/ssh/id_rsa"
-    "L /root/.ssh/id_rsa.pub - - - - /state/root/ssh/id_rsa.pub"
-  ];
 }