diff --git a/modules/sisko-share/default.nix b/modules/sisko-share/default.nix
index 22f52a6..41ea29b 100644
--- a/modules/sisko-share/default.nix
+++ b/modules/sisko-share/default.nix
@@ -16,19 +16,15 @@
     '';
   };
 
-  systemd.services.nfs-server.preStart = ''
-    chmod -R 775 /export/hd/torrent
-  '';
-
   services.webdav = {
     enable = true;
 
     settings = {
-      address = "0.0.0.0";
+      address = "10.1.1.2"; # accessible only in LAN, used by Kodi installed on the TV
       port = 9999;
       scope = "/mnt/hd/torrent";
       modify = false;
-      auth = false;
+      auth = false; # TODO should we enable authentication? It's only reachable in LAN
       debug = true;
       users = [ ];
     };
diff --git a/modules/transmission/default.nix b/modules/transmission/default.nix
index b049158..15db1d1 100644
--- a/modules/transmission/default.nix
+++ b/modules/transmission/default.nix
@@ -39,8 +39,8 @@
   ];
 
   systemd.tmpfiles.rules = [
-    "d /mnt/hd/torrent 774 transmission transmission"
-    "d /mnt/hd/torrent/.incomplete 774 transmission transmission"
+    "d /mnt/hd/torrent 770 transmission transmission"
+    "d /mnt/hd/torrent/.incomplete 770 transmission transmission"
   ];
 
   environment.persistence."/persist".directories = [