diff --git a/pkg/server/context.go b/pkg/server/context.go
index f89349b..6ae2bda 100644
--- a/pkg/server/context.go
+++ b/pkg/server/context.go
@@ -16,6 +16,11 @@ import (
 	"time"
 )
 
+const (
+	day = time.Hour * 24
+	max = day * 90
+)
+
 const (
 	userClaim     = "user"
 	totpClaim     = "totp"
diff --git a/scripts/install_openbsd.sh b/scripts/install_openbsd.sh
index d1e8719..2280c7a 100755
--- a/scripts/install_openbsd.sh
+++ b/scripts/install_openbsd.sh
@@ -14,21 +14,23 @@ rc_cmd $1
 EOF
 chmod 555 /etc/rc.d/docstore
 rcctl enable docstore
-rcctl set docstore flags server -c /var/wiki/docstore.conf
+rcctl set docstore flags server -c /var/docstore/docstore.conf
 
-# user
-useradd -m -b /var -s /sbin/nologin wiki
+# user and group
+mkdir /var/docstore
+groupadd docstore
+useradd -d /var/docstore -s /sbin/nologin -g docstore docstore
+chown docstore:docstore /var/docstore
 
 # config
-cat <<EOF> /var/wiki/docstore.conf
+cat <<EOF> /var/docstore/docstore.conf
 {
-	"data_dir": "/var/wiki",
-	"secret": "$(openssl rand -hex 32)",
-	"secure_cookie": true
+	"data_dir": "/var/docstore",
+	"secret": "$(openssl rand -hex 32)"
 }
 EOF
-chmod 640 /var/wiki/docstore.conf
-chgrp wiki /var/wiki/docstore.conf
+chmod 640 /var/docstore/docstore.conf
+chgrp docstore /var/docstore/docstore.conf
 
 # start
 rcctl start docstore