diff --git a/roles/borgbackup-client/templates/borgmatic/config.yaml.j2 b/roles/borgbackup-client/templates/borgmatic/config.yaml.j2
index d74f43cf..7f8ed328 100644
--- a/roles/borgbackup-client/templates/borgmatic/config.yaml.j2
+++ b/roles/borgbackup-client/templates/borgmatic/config.yaml.j2
@@ -32,8 +32,8 @@ encryption_passphrase: {{ borg.encryption_passphrase }}
 ssh_command: ssh -i /etc/borgmatic/id_ed25519_borg {{ borg.ssh_options | default("") }}
 borg_base_directory: /etc/borgmatic
 borg_config_directory: /etc/borgmatic/config/
-borg_cache_directory: /etc/borgmatic/cache
-borg_security_directory: /etc/borgmatic/config/security
+borg_cache_directory: /var/borgmatic/cache
+borg_security_directory: /var/lib/borg/security
 borg_keys_directory: /etc/borgmatic/config/keys
 compression: 'lz4'
 umask: 0077