diff --git a/nixos/pruflas/configuration.nix b/nixos/pruflas/configuration.nix
index 554bc5a..d96bfdf 100644
--- a/nixos/pruflas/configuration.nix
+++ b/nixos/pruflas/configuration.nix
@@ -18,7 +18,11 @@ in
 
   services.logind.lidSwitch = "ignore";
 
-  age.secrets.${hydraGitHubAuth}.file = "${secretsPath}/${hydraGitHubAuth}.age";
+  age.secrets.${hydraGitHubAuth} = {
+    file = "${secretsPath}/${hydraGitHubAuth}.age";
+    owner = "hydra-www";
+    group = "hydra";
+  };
 
   services.hydra = {
     enable = true;