diff --git a/hosts/controller/default.nix b/hosts/controller/default.nix
index a11ddc2..b4fa1ef 100644
--- a/hosts/controller/default.nix
+++ b/hosts/controller/default.nix
@@ -47,7 +47,8 @@
         "/var/lib/headscale"
         "/var/lib/grafana"
         "/var/lib/loki"
-        "/var/lib/ntfy-sh"
+        "/var/lib/private/ntfy-sh"
+        "/var/lib/private/uptime-kuma"
       ];
       encryption = {
         mode = "repokey-blake2";