diff --git a/cookbooks/matrix/Makefile b/cookbooks/matrix/Makefile
index 2b5b417..bc71946 100644
--- a/cookbooks/matrix/Makefile
+++ b/cookbooks/matrix/Makefile
@@ -10,3 +10,6 @@ PROJECT_GID = 10000
 
 # Include common Makefile
 include ../../scripts/common.mk
+
+$(TARGET_CHROOT)/etc/quadlets/matrix/tuwunel $(TARGET_CHROOT)/etc/quadlets/matrix/element-web:
+	install -d -m 0700 -o $(PROJECT_UID) -g $(PROJECT_GID) -D $@
diff --git a/cookbooks/matrix/config/examples/tuwunel.env b/cookbooks/matrix/config/examples/tuwunel.env
index 40097cb..074523c 100644
--- a/cookbooks/matrix/config/examples/tuwunel.env
+++ b/cookbooks/matrix/config/examples/tuwunel.env
@@ -10,7 +10,7 @@ TUWUNEL_REGISTRATION_TOKEN=changeme
 ## First-run initialization (matrix-init)
 ## These variables are used once by matrix-init to create the admin user and
 ## discover the admin room. The generated credentials are stored in
-## /var/lib/quadlets/matrix/tuwunel-backup.env (never edit that file manually).
+## /var/lib/virtiofs/data/matrix/tuwunel-backup.env (never edit that file manually).
 ##
 
 # Username and password for the initial admin account.
@@ -25,5 +25,5 @@ MATRIX_INIT_ADMIN_PASSWORD=changeme
 MATRIX_BACKUP_RETENTION=7
 
 # NOTE: MATRIX_BACKUP_ACCESS_TOKEN and MATRIX_BACKUP_ROOM_ID are auto-generated
-# by matrix-init into /var/lib/quadlets/matrix/tuwunel-backup.env. Do not set
+# by matrix-init into /var/lib/virtiofs/data/matrix/tuwunel-backup.env. Do not set
 # them here.