diff --git a/dovecot.nix b/dovecot.nix
index 33caa73..027e51d 100644
--- a/dovecot.nix
+++ b/dovecot.nix
@@ -196,7 +196,7 @@ in {
 
     systemd = {
       tmpfiles.rules = [
-        "d ${cfg.state-directory}        0751 ${cfg.mail-user} ${cfg.mail-group} - -"
+        "d ${cfg.state-directory}        0711 root root - -"
         "d ${cfg.mail-directory}         0750 ${cfg.mail-user} ${cfg.mail-group} - -"
         "d ${cfg.state-directory}/sieves 0750 ${config.services.dovecot2.user} ${config.services.dovecot2.group} - -"
       ];