diff --git a/src/main/java/app/coronawarn/testresult/config/SecurityConfig.java b/src/main/java/app/coronawarn/testresult/config/SecurityConfig.java
index 2327257..cc0e2f3 100644
--- a/src/main/java/app/coronawarn/testresult/config/SecurityConfig.java
+++ b/src/main/java/app/coronawarn/testresult/config/SecurityConfig.java
@@ -48,8 +48,6 @@ protected void configure(HttpSecurity http) throws Exception {
     http.authorizeRequests()
       .mvcMatchers("/api/**").permitAll()
       .mvcMatchers("/management/*").permitAll()
-      .mvcMatchers("/v3/**").permitAll()
-      .mvcMatchers("/swagger-ui/*").permitAll()
       .anyRequest().denyAll()
       .and().csrf().disable();
   }
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index 8215714..1a1d9b8 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -12,6 +12,11 @@ spring:
       ddl-auto: validate
   liquibase:
     change-log: classpath:db/changelog.yml
+springdoc:
+  api-docs:
+    path: /api/docs
+  swagger-ui:
+    path: /api/swagger
 management:
   endpoint:
     info:
diff --git a/src/test/java/app/coronawarn/testresult/TestResultCleanupTest.java b/src/test/java/app/coronawarn/testresult/TestResultCleanupTest.java
index 1fc0b6c..c67ec46 100644
--- a/src/test/java/app/coronawarn/testresult/TestResultCleanupTest.java
+++ b/src/test/java/app/coronawarn/testresult/TestResultCleanupTest.java
@@ -51,7 +51,7 @@ public void shouldCleanupDatabase() {
     Assert.assertEquals(resultId, find.get().getResultId());
     Assert.assertEquals(resultDate, find.get().getResultDate());
     // wait
-    Single.fromCallable(() -> true).delay(1, TimeUnit.SECONDS).toBlocking().value();
+    Single.fromCallable(() -> true).delay(2, TimeUnit.SECONDS).toBlocking().value();
     // find
     find = testResultRepository.findByResultId(resultId);
     Assert.assertFalse(find.isPresent());