diff --git a/services/forgejo.nix b/services/forgejo.nix
index e75444a..e34b984 100644
--- a/services/forgejo.nix
+++ b/services/forgejo.nix
@@ -4,6 +4,10 @@
   systemd.services.forgejo = {
     wants = [ "network-online.target" ];
     after = [ "network-online.target" ];
+    preStart = ''
+      mkdir -p /var/lib/forgejo/.ssh
+      chmod 700 /var/lib/forgejo/.ssh
+    '';
   };
 
   networking.firewall.interfaces.wg0.allowedTCPPorts = [