diff --git a/modules/age-secrets.nix b/modules/age-secrets.nix
index 26d0ee4..d3d8912 100644
--- a/modules/age-secrets.nix
+++ b/modules/age-secrets.nix
@@ -140,8 +140,8 @@
     git-crypt-key-dotfiles = {
       file = ../secrets/git-crypt-key-dotfiles.age;
       mode = "0400";
-      owner = "root";
-      group = "root";
+      owner = "gitea-runner";
+      group = "gitea-runner";
     };
 
     # Git-crypt symmetric key for server-config repo