diff --git a/matrix-module.nix b/matrix-module.nix
index 9116f09..a9c15fd 100644
--- a/matrix-module.nix
+++ b/matrix-module.nix
@@ -83,6 +83,10 @@ in {
       user = config.systemd.services.matrix-synapse.serviceConfig.User;
     };
 
+    systemd.tmpfiles.rules =
+      let user = config.systemd.services.matrix-synapse.serviceConfig.User;
+      in [ "d ${cfg.state-directory} 0700 ${user} root - -" ];
+
     services = {
       matrix-synapse = {
         enable = true;