diff --git a/configs/easyauth-main.conf b/configs/easyauth-main.conf
index 47384a8..a31e93a 100644
--- a/configs/easyauth-main.conf
+++ b/configs/easyauth-main.conf
@@ -24,10 +24,8 @@ kick-timeout = 300
 # 2 minutes before they can rejoin after being kicked for failed attempts
 reset-login-attempts-timeout = 120
 
-# Registration is disabled for players — admin-only via `auth register <user> <pass>`
-# With enable-global-password=true and single-use-global-password=false,
-# the /register command is disabled. Players can only /login with a password set by admin.
-enable-global-password = true
+# Per-user passwords, set by admin via `auth register <user> <pass>`
+enable-global-password = false
 single-use-global-password = false
 
 # Hide player coordinates during auth (teleport to spawn)
diff --git a/configs/easyauth-storage.conf b/configs/easyauth-storage.conf
new file mode 100644
index 0000000..a91ab7f
--- /dev/null
+++ b/configs/easyauth-storage.conf
@@ -0,0 +1,11 @@
+##                          ##
+##         EasyAuth         ##
+##  Storage Configuration   ##
+##                          ##
+
+database-type = "sqlite"
+
+sqlite {
+    sqlite-path = "EasyAuth/easyauth.db"
+    sqlite-table = "easyauth"
+}
diff --git a/configs/easyauth-technical.conf b/configs/easyauth-technical.conf
new file mode 100644
index 0000000..9dc9317
--- /dev/null
+++ b/configs/easyauth-technical.conf
@@ -0,0 +1,7 @@
+##                          ##
+##         EasyAuth         ##
+##     Technical Config     ##
+##                          ##
+
+# No global password set (registration is admin-only)
+global-password = null
diff --git a/configs/easyauth-translation.conf b/configs/easyauth-translation.conf
new file mode 100644
index 0000000..000d912
--- /dev/null
+++ b/configs/easyauth-translation.conf
@@ -0,0 +1,7 @@
+##                             ##
+##          EasyAuth           ##
+##  Translation Configuration  ##
+##                             ##
+
+enable-server-side-translation = true
+default-language = "en_us"
diff --git a/modules/minecraft.nix b/modules/minecraft.nix
index e317eec..9dd7f97 100644
--- a/modules/minecraft.nix
+++ b/modules/minecraft.nix
@@ -135,7 +135,7 @@ in
 
   # Data directory
   systemd.tmpfiles.rules = [
-    "d ${mcDataDir} 0755 root root -"
+    "d ${mcDataDir} 0755 1000 1000 -"
   ];
 
   systemd.services.minecraft-mod-configs = {
@@ -155,11 +155,22 @@ in
         cp ${../server-icon.png} ${mcDataDir}/server-icon.png
         mkdir -p ${mcDataDir}/config
         cp ${../configs/anti-xray.toml} ${mcDataDir}/config/anti-xray.toml
+        # SkinRestorer config (writable — mod writes back to it)
         mkdir -p ${mcDataDir}/config/skinrestorer
         cp ${../configs/skinrestorer-config.json} ${mcDataDir}/config/skinrestorer/config.json
+        chmod 644 ${mcDataDir}/config/skinrestorer/config.json
+
+        # EasyAuth configs (writable — mod writes back to them)
         mkdir -p ${mcDataDir}/config/EasyAuth
         cp ${../configs/easyauth-main.conf} ${mcDataDir}/config/EasyAuth/main.conf
         cp ${../configs/easyauth-extended.conf} ${mcDataDir}/config/EasyAuth/extended.conf
+        cp ${../configs/easyauth-technical.conf} ${mcDataDir}/config/EasyAuth/technical.conf
+        cp ${../configs/easyauth-storage.conf} ${mcDataDir}/config/EasyAuth/storage.conf
+        cp ${../configs/easyauth-translation.conf} ${mcDataDir}/config/EasyAuth/translation.conf
+        chmod 644 ${mcDataDir}/config/EasyAuth/*.conf
+
+        # Ensure container user (UID 1000) owns everything
+        chown -R 1000:1000 ${mcDataDir}
       '';
     };
   };