diff --git a/morph/lib/issuer-aws.nix b/morph/lib/issuer-aws.nix
index bf7de56cfb570857da32c34ebfcc9b21c91e702e..ea90bb5fb23091a390eb1bb32c83a019cff3edd0 100644
--- a/morph/lib/issuer-aws.nix
+++ b/morph/lib/issuer-aws.nix
@@ -18,6 +18,17 @@
   # <https://github.com/DBCDK/morph/issues/146>.
   networking.hostName = name;
 
+  fileSystems = {
+    # Mount a dedicated filesystem (ideally on a dedicated volume, but that's
+    # beyond control of this particular part of the system) for the
+    # PaymentServer voucher database.  This makes it easier to manage for
+    # tasks like backup/recovery and encryption.
+    "voucher-database" = {
+      label = "voucher-database";
+      mountPoint = "/var/lib/zkapissuer-vouchers";
+    };
+  };
+
   # Clean up packages after a while
   nix.gc = {
     automatic = true;