diff --git a/system/core/persistence.nix b/system/core/persistence.nix
index 694d5b8..27ef32f 100644
--- a/system/core/persistence.nix
+++ b/system/core/persistence.nix
@@ -19,33 +19,50 @@
     users.lilith = {
       directories = [
         ".config/syncthing"
-        ".config/sops"
-        ".config/keepassxc"
-        ".config/vesktop"
-        ".config/Signal"
-        ".gnupg"
-        ".ssh"
-
-        ".thunderbird"
-        ".mozilla"
-        ".zen"
+        {
+          directory = ".config/sops";
+          mode = "0700";
+        }
+        {
+          directory = ".gnupg";
+          mode = "0700";
+        }
+        {
+          directory = ".ssh";
+          mode = "0700";
+        }
+        {
+          directory = ".keepass";
+          mode = "0700";
+        }
 
         "nixos"
         "sync"
         "code"
-        "games"
-        ".keepass"
         ".local/share/direnv"
 
-        ".local/share/PrismLauncher"
-        ".local/share/Steam"
-        ".local/share/lutris"
-        ".local/share/games"
         ".local/share/iamb"
-        ".local/share/TelegramDesktop"
         ".local/share/Monero"
       ]
+      ++ lib.optionals config.desktop.enable [
+        ".thunderbird"
+        ".mozilla"
+        ".zen"
+
+        ".config/keepassxc"
+        ".config/vesktop"
+        ".config/Signal"
+        ".local/share/TelegramDesktop"
+
+        ".local/share/Steam"
+      ]
       ++ lib.optionals config.gaming.enable [
+        "games"
+
+        ".local/share/PrismLauncher"
+        ".local/share/lutris"
+        ".local/share/games"
+
         ".config/unity3d/Team Cherry"
         ".config/EgoSoft"
         ".local/share/Paradox Interactive"
diff --git a/system/optional/gaming.nix b/system/optional/gaming.nix
index 85720a9..387ad9d 100644
--- a/system/optional/gaming.nix
+++ b/system/optional/gaming.nix
@@ -41,7 +41,7 @@ in
       ];
     };
 
-    systemd.user.services.steam = {
+    systemd.user.services.steam = gaming-host {
       enable = true;
       description = "Open Steam in the background at boot";
       serviceConfig = {