diff --git a/agenix/hosts/sail/proxitok/environment.age b/agenix/hosts/sail/proxitok/environment.age
index cbbaa62..f8a4c2c 100644
Binary files a/agenix/hosts/sail/proxitok/environment.age and b/agenix/hosts/sail/proxitok/environment.age differ
diff --git a/container/proxitok/default.nix b/container/proxitok/default.nix
index 1bba301..a972656 100644
--- a/container/proxitok/default.nix
+++ b/container/proxitok/default.nix
@@ -11,6 +11,9 @@
           depends_on = [ "proxitok-signer" ];
           ports = [ "127.0.0.1:8005:80" ];
           env_file = [ config.age.secrets.proxitok-environment.path ];
+          volumes = [
+            "/etc/container-proxitok/cache:/cache"
+          ];
           labels = {
             "com.centurylinklabs.watchtower.enable" = "true";
           };
@@ -30,6 +33,10 @@
     };
   };
 
+  systemd.tmpfiles.rules = [
+    "d /etc/container-proxitok/cache 0755 33 33"
+  ];
+
   services.nginx = {
     enable = true;
     recommendedOptimisation = true;