diff --git a/tasks/omni.yaml b/tasks/omni.yaml
index f5bf849..289b4a2 100644
--- a/tasks/omni.yaml
+++ b/tasks/omni.yaml
@@ -8,6 +8,7 @@
     mode: "0755"
   loop:
     - "/mnt/omni"
+    - "/mnt/omni/data"
     - "/mnt/omni/etcd-vol"
 
 # omni etcd key
@@ -53,27 +54,29 @@
 
     volumes:
       - "/mnt/omni/etcd-vol:/_out/etcd"
+      - "/mnt/omni/data/:/data"
       - "/mnt/omni/omni.asc:/omni.asc"
       - "/mnt/omni/omni.pem:/tls.crt"
       - "/mnt/omni/omni.key:/tls.key"
 
     command: >-
       --account-id={{ omni_account_uuid }}
-      --name=omni
-      --cert=/tls.crt
-      --key=/tls.key
-      --machine-api-cert=/tls.crt
-      --machine-api-key=/tls.key
-      --private-key-source='file:///omni.asc'
-      --event-sink-port=8091
-      --bind-addr=0.0.0.0:443
-      --machine-api-bind-addr=0.0.0.0:8090
-      --k8s-proxy-bind-addr=0.0.0.0:8100
       --advertised-api-url="https://api.{{ omni_domain }}"
       --advertised-kubernetes-proxy-url="https://kube.{{ omni_domain }}:8100"
+      --auth-auth0-client-id={{ auth0_client_id }}
+      --auth-auth0-domain={{ auth0_domain }}
+      --auth-auth0-enabled=true
+      --bind-addr=0.0.0.0:443
+      --cert=/tls.crt
+      --event-sink-port=8091
+      --initial-users={{ omni_sso_user }}
+      --k8s-proxy-bind-addr=0.0.0.0:8100
+      --key=/tls.key
+      --machine-api-bind-addr=0.0.0.0:8090
+      --machine-api-cert=/tls.crt
+      --machine-api-key=/tls.key
+      --name=omni
+      --private-key-source='file:///omni.asc'
       --siderolink-api-advertised-url="https://{{ omni_domain }}:8090"
       --siderolink-wireguard-advertised-addr="{{ omni_ip }}:50180"
-      --initial-users={{ omni_sso_user }}
-      --auth-auth0-enabled=true
-      --auth-auth0-domain={{ auth0_domain }}
-      --auth-auth0-client-id={{ auth0_client_id }}
+      --sqlite-storage-path=/data/omni-sqlite.db