diff --git a/hosts/nas/modules/pyload.nix b/hosts/nas/modules/pyload.nix
index 05a8152..90b5c08 100644
--- a/hosts/nas/modules/pyload.nix
+++ b/hosts/nas/modules/pyload.nix
@@ -90,6 +90,9 @@ in
     };
 
     serviceConfig = {
+      # Disable PrivateTmp so unrar can use system /tmp for extraction
+      PrivateTmp = lib.mkForce false;
+
       # Bind-mount DNS configuration files into the sandboxed service
       BindReadOnlyPaths = [
         "/etc/resolv.conf"