diff --git a/services/server-permissions.nix b/services/server-permissions.nix
new file mode 100644
index 0000000..7fa12fa
--- /dev/null
+++ b/services/server-permissions.nix
@@ -0,0 +1,18 @@
+# services/server-permissions.nix
+{ config, pkgs, lib, ... }:
+{
+  config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
+    systemd.tmpfiles.rules = [
+      # Downloads - qbittorrent writes here
+      "Z /mnt/storage/torrents/downloads 2775 qbittorrent media -"
+
+      # Shows - sonarr organises, bazarr writes subtitles
+      "d /mnt/storage/torrents/shows 2775 sonarr media -"
+      "Z /mnt/storage/torrents/shows 2775 sonarr media -"
+
+      # Audiobooks
+      "d /mnt/storage/torrents/audiobooks 2775 sonarr media -"
+      "Z /mnt/storage/torrents/audiobooks 2775 sonarr media -"
+    ];
+  };
+}