diff --git a/src/main/java/dev/urner/volodb/security/WebSecurityConfig.java b/src/main/java/dev/urner/volodb/security/WebSecurityConfig.java
index 0692643..eaf8deb 100644
--- a/src/main/java/dev/urner/volodb/security/WebSecurityConfig.java
+++ b/src/main/java/dev/urner/volodb/security/WebSecurityConfig.java
@@ -50,7 +50,7 @@ SecurityFilterChain applicationSecurity(HttpSecurity http) throws Exception {
         .authorizeHttpRequests(registry -> registry
             .requestMatchers("/auth/login").permitAll()
             .requestMatchers("/error").permitAll()
-            .requestMatchers("/docs/**").permitAll()
+            .requestMatchers("/files/**").permitAll()
             .anyRequest()
             .authenticated());