diff --git a/modules/nixos/services/opencloud/default.nix b/modules/nixos/services/opencloud/default.nix
index 108aa14..e372188 100644
--- a/modules/nixos/services/opencloud/default.nix
+++ b/modules/nixos/services/opencloud/default.nix
@@ -45,7 +45,7 @@ in
     let
       sopsPath = secret: {
         path = "${service.sops.path0}/${service.name}-${secret}";
-        owner = service.name;
+        owner = "root";
         mode = "600";
       };
     in