diff --git a/flake.nix b/flake.nix
index 17ae332..95ab793 100644
--- a/flake.nix
+++ b/flake.nix
@@ -112,9 +112,9 @@
               };
               caldav-export-config = {
                 file = ./secrets/caldav-export-config.age;
-                owner = "nobody";
-                group = "nobody";
-                mode = "0400";
+                owner = "root";
+                group = "root";
+                mode = "0440";
               };
             };
           }