diff --git a/modules/servers/acme-dns.nix b/modules/servers/acme-dns.nix
index b114ef7..f5b0a7f 100644
--- a/modules/servers/acme-dns.nix
+++ b/modules/servers/acme-dns.nix
@@ -65,7 +65,7 @@ in
           };
 
           api = {
-            ip = cfg.api.isten;
+            ip = cfg.api.listen;
             disable_registration = false;
             port = cfg.api.port;
             tls = "none";
@@ -91,13 +91,12 @@ in
         after = [ "network.target" ];
         wantedBy = [ "multi-user.target" ];
 
-        DynamicUser = true;
-
         startLimitBurst = 4;
         startLimitIntervalSec = 5 * 60;  # 5 mins
         serviceConfig = {
           AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
           DynamicUser = true;
+          BindPaths = [ cfg.stateDir ];
           ExecStart = "${cfg.package}/bin/acme-dns -d -c ${configFile}";
           Restart = "always";
           RestartSec = "4s";