diff --git a/unraid-1/basement.template.xml b/unraid-1/basement.template.xml
index 1968b7d..e3950ec 100644
--- a/unraid-1/basement.template.xml
+++ b/unraid-1/basement.template.xml
@@ -49,6 +49,8 @@ Publicly served at https://basement.pq.io via Caddy on classe (reverse proxy →
 
   <Config Name="WebUI" Target="8080" Default="8080" Mode="tcp" Description="HTTP port. Caddy on classe proxies basement.pq.io here." Type="Port" Display="always" Required="true" Mask="false">8080</Config>
 
+  <Config Name="Data dir" Target="/var/lib/basement-ui" Default="/mnt/user/appdata/basement" Mode="rw" Description="Persistent state (audit log, sessions). basement-ui's default BASEMENT_DATA_DIR; container can't mkdir under / so this mount is required." Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/basement</Config>
+
   <Config Name="BASEMENT_DRIVER_GARAGE_ADMIN_URL" Target="BASEMENT_DRIVER_GARAGE_ADMIN_URL" Default="http://host.docker.internal:3903" Mode="" Description="Garage admin API base URL (reaches the sibling garage container via the host-gateway alias). basement-ui namespaces driver-specific config as BASEMENT_DRIVER_GARAGE_*." Type="Variable" Display="always" Required="true" Mask="false">http://host.docker.internal:3903</Config>
   <Config Name="BASEMENT_DRIVER_GARAGE_ADMIN_TOKEN" Target="BASEMENT_DRIVER_GARAGE_ADMIN_TOKEN" Default="" Mode="" Description="Bearer token for Garage admin API. Pre-filled by install.sh (same value as the garage container's GARAGE_ADMIN_TOKEN)." Type="Variable" Display="always" Required="true" Mask="true">__GARAGE_ADMIN_TOKEN__</Config>
 
diff --git a/unraid-1/install.sh b/unraid-1/install.sh
index d00d671..ce69522 100755
--- a/unraid-1/install.sh
+++ b/unraid-1/install.sh
@@ -38,7 +38,7 @@ die() { printf "install.sh: %s\n" "$*" >&2; exit 1; }
 [ -d /mnt/user ]                       || die "/mnt/user missing — is the array started?"
 [ -d /mnt/user/s3 ]                    || die "share /mnt/user/s3 missing. Create it in unraid UI first (Shares → Add Share → 's3', cache:yes recommended), then re-run."
 
-mkdir -p "$APPDATA/meta" "$DATADIR" "$TEMPLATE_DIR"
+mkdir -p "$APPDATA/meta" "$DATADIR" "$TEMPLATE_DIR" /mnt/user/appdata/basement /mnt/user/appdata/host-agent
 
 # ── garage.toml ──
 if [ -f "$TOML_DEST" ] && [ "${FORCE:-}" != "1" ]; then